Senior Site Reliability Engineer

Hybrid in Argentina,

Site Reliability Engineering

Facebook LinkedIn Send via email

Looking for something else?

Find a vacancy that works for you. Send us your CV to receive a personalized offer.

Find me a job

Location-specific conditions & benefits*

Choose an option

We are seeking a skilled Senior Site Reliability Engineer to join our team. We're the network engineering team behind our connectivity across Google Cloud, AWS, Azure, and our external partner networks. We tie the clouds together over a private interconnect fabric, run next-generation firewalls in the traffic path, and manage nearly all of it as code. We also run the secure access layer that connects our people to the internet and to internal services: Zscaler, Menlo Security, and Tailscale

Right now we're building a new hub-and-spoke network in Google Cloud and connecting it to the rest of the environment. We're also building in-house tools that turn live network state into clear answers during incidents

Responsibilities

Build and change cloud networks in Terraform, including VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access through Private Service Connect, PrivateLink, or Private Endpoints, and the routing that connects them all
Operate private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, along with the BGP sessions running over them, including adding circuits, tuning routing policy, and testing failover
Maintain firewall policy across cloud-native firewalls and Palo Alto NGFWs via Panorama, managing changes from review through deployment
Operate the secure access stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the proxy auto-config (PAC) files that direct traffic between them, making policy changes and troubleshooting user connectivity
Troubleshoot connectivity and performance issues using flow logs, firewall logs, BGP state, and synthetic monitoring tools such as ThousandEyes, while participating in the team's on-call rotation and documenting findings
Extend Python-based tooling that validates live network state against intended configuration
Review teammates' merge requests and keep runbooks and design documentation accurate and up to date

Requirements

A minimum of 3 years of relevant experience in network engineering, including building production networks in a public cloud such as GCP, AWS, or Azure, with deep knowledge of one cloud and willingness to learn others considered sufficient
Solid routing fundamentals, including the ability to explain how BGP selects a best path, how AS-path, MED, and local preference influence that decision, and how to diagnose a missing expected route
Hands-on experience with Terraform or comparable infrastructure-as-code tools within a Git-based review workflow
Practical experience with network security controls, including firewall rules, security groups, NAT, and segmentation
Sufficient Python skills to automate repetitive tasks or pull data from a cloud API
A methodical troubleshooting approach, forming hypotheses, testing them against data, and recording outcomes
Strong written communication skills, producing change plans, incident notes, and documentation that other engineers can rely on
Upper-Intermediate English language competency (B2)

Nice to have

Experience with Google Cloud networking tools such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny
Familiarity with Equinix Fabric or another interconnect or network-as-a-service provider
Experience with Palo Alto NGFW and Panorama, ideally including VM-Series deployed in the cloud
Background with Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access platform, Menlo Security or another browser isolation product, and Tailscale or other WireGuard-based access solutions
Knowledge of BFD and BGP graceful restart, along with experience designing failover scenarios and validating that they work
Experience with network monitoring platforms such as ThousandEyes
Relevant certifications, such as Google Professional Cloud Network Engineer or AWS equivalents, which would be considered a valuable addition