Cloud Networking SRE

• Significant experience with designing and operating production cloud networks across both GCP and AWS

• Deep practical knowledge of routing, segmentation, firewalls, DNS, VPNs, bastion access, private connectivity, and cloud-network troubleshooting

• Strong SRE experience with SLOs, observability, incident response, post-incident remediation, capacity planning, and disaster recovery

• Hands-on experience with Infrastructure as Code using Terraform or OpenTofu and Terragrunt, plus infrastructure automation using Python, Go, or a comparable language

• Practical experience with Kubernetes networking or adjacent platform infrastructure

• Hands-on experience with FreeIPA and Keycloak, including practical understanding of cloud identity and access dependencies; familiarity with OIDC, SAML, SCIM, or JIT access is beneficial

• Solid understanding of security best practices for cloud infrastructure, including safe infrastructure changes and operational guardrails

• Hands-on experience with AI-driven infrastructure and workflows; experience with Tailscale, Headscale, WireGuard, NetBox, or mixed cloud and data-center environments is a plus

• Proven ability to lead cross-team technical decisions, document architecture and operational standards, and collaborate without relying on formal authority

• Demonstrated B2+ English proficiency, both written and spoken, for daily communication with the team and a US-based client, including technical ownership during US business hours and critical-incident escalation

Responsabilidades: • Define cloud networking standards across cloud providers, covering routing, segmentation, firewalls, NAT, DNS, ingress, egress, and private connectivity

• Own the technical direction of VPN and private-access connectivity, improving the reliability and operability of critical network services

• Collaborate with Cloud Platform, DevPlat, Systems Engineering, IT, and InfoSec teams on connectivity architecture and technical decisions

• Establish SLOs for critical network services and implement actionable monitoring and alerting using Grafana, Mimir, Loki, Pingdom, and PagerDuty

• Lead diagnosis and mitigation of significant connectivity incidents, driving permanent remediation and maintaining runbooks, failure-mode documentation, and escalation paths

• Develop infrastructure automation using Terraform or OpenTofu, Terragrunt, Python, and Go, with safe validation, deployment, and rollback practices

• Guide VPN, bastion, DNS, device-trust, IPAM, and cloud-to-data-center connectivity patterns, including technologies such as Tailscale, Headscale, and NetBox

• Mentor engineers and distribute operational knowledge through standards, architecture decisions, and operational practices that strengthen coverage across time zones

Beneficios: • SoftServe University, with learning opportunities, certification support and leadership opportunities to help you grow your skills

• Medical insurance for you and your family

• Food vouchers

• Extra days off

• Dare to Care, our holistic well-being program

• Anniversary Program to celebrate your time with us