SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scale GP (Scale Generative AI Platform) is an enterprise AI platform providing APIs and infrastructure for knowledge retrieval, inference, evaluation, agents, and more. It deploys across AWS, Azure, and GCP, often directly into customer-controlled cloud environments in highly regulated industries including healthcare, financial services, telecom, and retail.
As SGP has grown in scale and complexity, networking has become a critical architectural discipline. Teams routinely encounter the same hard problems—VPC design, routing, ingress/egress, private connectivity, service exposure, address-space constraints, firewall policies, and cross-environment communication—but solve them differently depending on the deployment context.
You will own network architecture across a large and rapidly growing fleet of Kubernetes environments spanning AWS, Azure, and GCP, with many deployed inside customer-owned cloud accounts and networks outside your control. Constraints vary significantly: commercial deployments behind customer-managed API gateways, hub-and-spoke enterprise networks with assigned address space, GovCloud environments with default-deny firewall policies, and fully air-gapped deployments with no external connectivity.
Your primary goal is to define one clear, secure, and supportable networking model for SGP and establish the small set of defensible variations required to operate across different clouds, customer architectures, and compliance regimes.
Key responsibilities include: owning network architecture and enforcing standards across cloud environments; designing and reviewing VPC architectures, peering, DNS, load balancing, and CDN/edge configurations; bringing technical judgment to VPN, routing, access, and traffic-flow decisions; reviewing proposed networking solutions from platform, product, and forward-deployed teams; defining standard connectivity patterns between Scale's control plane and customer data planes; owning the customer-boundary delivery blueprint for code, images, and traffic; managing engineer access into customer and internal environments; owning the Kubernetes traffic layer including Istio/Envoy mesh and NetworkPolicy; preventing one-off implementations from becoming long-term platform burden; partnering with security engineering on network segmentation and compliance; debugging complex connectivity and latency issues; and documenting architecture, standards, and runbooks.
Required qualifications: 5+ years of network engineering experience including designing and operating production networks in cloud environments; deep expertise in cloud networking on at least two of AWS, Azure, and GCP (VPC design, peering, Transit Gateway, private connectivity, DNS); Kubernetes networking depth (CNI, ingress, NetworkPolicy, service mesh); strong fundamentals in TCP/IP, BGP, routing, firewalls, VPN, and TLS; experience with edge/CDN platforms like Cloudflare; demonstrated ability to define network standards or reference architectures adopted by other teams; comfort as sole domain owner managing multiple live environments; experience making build-vs-adopt networking decisions with vendor or contractual consequences; Infrastructure-as-Code proficiency (Terraform preferred); and excellent communication skills to explain tradeoffs to technical and non-technical audiences.
Plus: familiarity with network security and compliance requirements in regulated industries (healthcare, finance, government) across multiple compliance regimes (commercial, FedRAMP/GovCloud, air-gapped).
