Skip to content
CrusoeCrusoeSan Francisco, CA

Principal Network Architect

Principal-level individual contributor defining and owning network architecture strategy across Crusoe's AI infrastructure stack, from data center fabrics and RDMA to SDN, Kubernetes networking, and automation. Requires 12+ years experience with expert-level routing, SDN, and large-scale data center design.

265k – 310k/yr
On-site12+ YOESecurity Engineering

About the role

What You'll Be Working On

  • Hyperscale Data Center Architecture: Own end-to-end network architecture for Crusoe's AI data centers, including spine-leaf fabrics, out-of-band management, RDMA (RoCEv2/InfiniBand), and inter-campus WAN design.
  • SDN Control Plane Design: Design and evolve SDN control plane architectures for programmable underlay and overlay networking across multi-vendor hardware environments.
  • Kubernetes Networking: Define CNI selection, network policies, multi-cluster service mesh, and BGP peering architecture across Crusoe's Managed Kubernetes platform.
  • Intent-Based Networking: Architect IBN frameworks that translate high-level business and operational goals into validated, auto-generated device configurations.
  • Declarative Networking and GitOps: Establish infrastructure-as-code practices, GitOps-driven network provisioning, and continuous validation pipelines for network state.
  • Network Source of Truth: Build and own Crusoe's SoT strategy, defining authoritative data models (IPAM, DCIM, CMDB) and ensuring all devices, links, and policies are version-controlled and consistently sourced.
  • Automation Workflows: Design day-0/1/2 automation using tools like Ansible, Nornir, or Terraform, driven by the network source of truth.
  • Observability and Telemetry: Define streaming telemetry architecture (gNMI/gRPC), intent verification, and closed-loop remediation pipelines.
  • Standards and Cross-Functional Leadership: Establish engineering standards and reference architectures, lead architecture reviews, author design documents, and present proposals to senior leadership.
  • Team Mentorship: Mentor senior and staff network engineers, growing the technical depth and breadth of the broader network engineering team.

What You'll Bring to the Team

  • 12+ years of progressive network engineering and architecture experience, with at least 5 years in leadership role.
  • Large-scale data center expertise with a proven track record designing networks at 500+ switches across multi-campus environments.
  • Expert-level routing knowledge including deep proficiency in BGP, EVPN/VXLAN, OSPF, ECMP, BFD, and modern data center routing design.
  • SDN and programmability experience with production-level work using an SDN controller (OpenDaylight, ONOS, Apstra, Contrail, or equivalent) and network programmability via NETCONF/YANG, RESTCONF, or gNMI.
  • Kubernetes networking proficiency with hands-on experience in CNI selection (Calico, Cilium, Flannel, Multus), network policies, and BGP integration.
  • RDMA and HPC networking understanding including familiarity with RoCEv2, InfiniBand, PFC, ECN, and lossless fabric design for AI/ML workloads.
  • Software engineering fundamentals including strong command of Git, CI/CD, code review, and infrastructure-as-code tooling (Terraform, Ansible, Nornir).
  • Communication and influence with exceptional written and verbal skills and the ability to write crisp design documents and drive alignment across engineering and product leadership.

Bonus Points

  • Experience at a hyperscaler, AI cloud provider, HPC center, or large-scale co-location operator.
  • Hands-on experience with SONiC OS, P4 programmable data planes, SRv6, or silicon-level knowledge of Broadcom Tomahawk/Trident.
  • Open source contributions to networking projects such as SONiC, NetBox, FRR, or Cilium.
  • Familiarity with formal network verification tools like Batfish or Minesweeper, or eBPF-based networking and observability.
  • Relevant certifications including CCIE (DC/SP), JNCIE, or vendor-specific SDN/cloud certifications.

Benefits

  • Competitive compensation and equity packages
  • Restricted Stock Units
  • Paid time off, paid holidays & leave of absence programs
  • Comprehensive health, dental & vision insurance
  • Employer contributions to HSA account
  • Paid parental leave
  • Paid life insurance, short-term and long-term disability
  • Professional development & tuition reimbursement
  • Mental health & wellness support
  • Commuter benefits (parking & transit)
  • Cell phone stipend
  • 401(k) Retirement plan with company match up to 4% of salary
  • Volunteer time off
  • Global travel insurance & emergency assistance
  • Daily meals allowance
  • Additional perks & programs specific to location

Skills

BGPEvpn/VxlanOspfEcmpBfdSdnNetconf/YangGnmiKubernetesCniCalicoCiliumTerraformAnsibleNornir
Snowflake

Principal Engineer, Identity Data Security and Trust

SnowflakeMenlo Park, CA

Leads architecture and strategy for Data Exfiltration Protection (DXP) and Data Movement Policy (DMP) systems. Bridges security policy with scalable enforcement in multi-cloud environments, requiring 12+ years experience in distributed systems and security expertise.

264k – 380k/yr
On-site12+ YOESecurity Engineering
Databricks

Principal Engineer, Authentication

DatabricksBellevue, WA +1

Principal Engineer leads Authentication strategy at Databricks, crafting secure, scalable systems with 10+ years in data security, 15+ in distributed systems, and MS/PhD required. Mentors teams and drives executive decisions.

266k – 366k/yr
Remote10+ YOESecurity Engineering
Fluidstack

Principal Incident Responder

FluidstackSan Francisco, CA +1

Lead material incident response as the most senior commander. Build and run the full IR program including runbooks, on-call processes, agent-human coordination, and cross-functional remediation for AI infrastructure.

270k – 370k/yr
On-siteSecurity Engineering
OpenAI

Principal Security Engineer, Infrastructure Security

OpenAISan Francisco, CA +3

Leads architecture and implementation of planet-scale security services like authN/Z, proxies, and key management for OpenAI's GPU clusters, multi-cloud infra, and AI models. Requires expertise in secure distributed systems, cloud platforms, and cross-team leadership.

278k – 490k/yr
RemoteSecurity Engineering
OpenAI

Principal Security Engineer, Infrastructure Security

OpenAISan Francisco, CA +3

Principal Security Engineer leads security for OpenAI's infrastructure including GPU clusters, multi-cloud, datacenters, and Kubernetes. Drives strategy, builds controls against advanced threats, and mentors teams with deep cloud and on-prem expertise.

278k – 490k/yr
RemoteSecurity Engineering