SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mistral is building full-stack AI solutions—from frontier models to developer tools and compute infrastructure. This role is for an experienced network engineer to design, automate, and operate resilient connectivity across Mistral's distributed data centers, cloud environments, and edge networks.
You will own the design and evolution of inter-site, cloud, and internet connectivity for large-scale AI infrastructure. Key responsibilities include managing external BGP policy and traffic engineering at the edge (route filtering, failover, capacity planning), building API-driven automation for edge routing, firewalls, VPNs, and carrier connectivity, and coordinating with carriers, cloud providers, and colocation partners on design and provisioning.
You will design safe change workflows with automated validation, staged rollouts, observability, and rollback capabilities. You'll participate in on-call rotation, troubleshoot active WAN and edge incidents, and drive lasting improvements from root-cause analysis. You'll also review designs and code across the organization, helping raise network engineering quality.
Required experience includes deep hands-on WAN and edge networking (internet connectivity, data-center interconnect, private WAN, or cloud networking), production BGP design and debugging, stateful firewalls and redundant edge designs on major platforms, and production network automation using APIs and data models (REST, NETCONF, gNMI/OpenConfig, Ansible, Terraform). You need strong software-engineering fundamentals in a general-purpose language and willingness to become productive in Go. Operational troubleshooting expertise using routing state, packet captures, telemetry, and logs is essential, along with clear communication and stakeholder management skills.
Nice-to-have skills include FortiGate/FortiManager experience, public-cloud or hybrid-cloud interconnect specialization, edge security techniques (RPKI, DDoS mitigation), streaming telemetry, and familiarity with Kubernetes controllers or declarative systems.
