# Senior Cloud Infrastructure Engineer (Cloud Networking) **Company:** [Airwallex](https://scaleengineer.com/companies/airwallex) Join Airwallex as a Senior Cloud Infrastructure Engineer to design and optimize multi-region, multi-cloud network architectures for a globally distributed financial platform serving 250,000+ businesses. You'll architect highly available AWS and GCP cloud networks, manage complex hybrid connectivity, and automate infrastructure using Infrastructure as Code while supporting mission-critical financial operations under strict regulatory compliance. **Role:** Cloud Infrastructure Engineer **Seniority:** Senior **Locations:** SG - Singapore **Salary:** 140000–200000 USD [Apply](https://jobs.ashbyhq.com/airwallex/99c42d56-094d-4faa-9f6a-221714c9a8cf) Canonical: https://scaleengineer.com/jobs/airwallex/senior-cloud-infrastructure-engineer-cloud-networking --- ## Responsibilities - Multi-Cloud Network Architecture Design: Design, build, and optimize highly available, multi-account, and multi-region cloud network architectures across AWS and GCP platforms. Implement advanced networking patterns including Layer 3 routing, Transit Gateway orchestration, Shared VPC configurations, Cloud Router deployments, and Direct Connect integrations to support globally distributed financial operations serving 250,000+ businesses. - Infrastructure as Code Implementation: Automate and manage global cloud network infrastructure using Terraform through Git-driven CI/CD pipelines. Ensure infrastructure provisioning is repeatable, versionable, and auditable while maintaining strict compliance with financial regulatory requirements and industry best practices for Infrastructure as Code deployment. - Hybrid and Cross-Cloud Connectivity Management: Manage complex hybrid connectivity scenarios including BGP routing protocols, IPsec VPN configurations, and dynamic cloud routing between public clouds (AWS/GCP), regional Points of Presence (POPs), and external banking partner networks. Ensure strict adherence to financial regulatory requirements and maintain high availability for mission-critical payment infrastructure. - Operational Excellence and Network Observability: Serve as an escalation point for complex cloud networking issues within the global infrastructure team. Improve network visibility through advanced observability and monitoring implementations. Participate in a global on-call rotation to ensure 24/7 support for business-critical cloud infrastructure serving the financial platform. - Cross-Functional Infrastructure Collaboration: Work closely with Security, DevOps, and Platform teams to design and implement secure Landing Zones and automated network controls. Collaborate on zero-to-one infrastructure initiatives that solve complex, high-visibility problems while empowering developer productivity across globally distributed engineering teams. - Network Security and Compliance: Implement network security controls and ensure compliance with financial industry regulations (PCI-DSS, SOX, local banking requirements). Design network architectures that balance security, scalability, and performance for a high-concurrency, high-availability financial platform serving global businesses. ## Requirements ### education - {"name":"Associate-Level Networking Certification or Equivalent","description":"Holds or possesses equivalent hands-on experience matching Associate-level networking certifications such as CCNA (Cisco), JNCIA-Junos (Juniper), HCIA (Huawei), Aruba ACA, CompTIA Network+, AWS Certified Advanced Networking - Specialty, or GCP Professional Cloud Network Engineer (PCNE)."} - {"name":"Advanced Networking Certifications (Preferred)","description":"Advanced-level certifications such as CCNP (Cisco), JNCIP (Juniper), or AWS Certified Advanced Networking - Specialty demonstrate commitment to deep networking expertise and advanced cloud architecture knowledge."} ### technical - {"name":"AWS Cloud Networking Expertise","description":"Hands-on experience designing and operating AWS network environments at scale, including VPC architecture, Transit Gateway configuration, Route Table optimization, Direct Connect setup, and AWS Network Firewall implementation for multi-region deployments."} - {"name":"Infrastructure as Code Proficiency","description":"Advanced proficiency in Terraform or equivalent Infrastructure as Code tools for provisioning, managing, and automating cloud network components. Experience with Git-driven CI/CD pipelines and version control for infrastructure code."} - {"name":"Cloud Routing and BGP Fundamentals","description":"Strong knowledge of core routing and switching concepts, subnetting, TCP/IP protocol stack, and BGP dynamic routing principles. Practical experience implementing and troubleshooting BGP in cloud environments."} - {"name":"Multi-Cloud Platform Experience","description":"Practical hands-on experience with GCP networking concepts including Shared VPC architecture and Cloud Router, or equivalent multi-cloud environment exposure. Understanding of cloud provider-specific networking services and their integration points."} - {"name":"Linux and Scripting Capabilities","description":"Proficiency with Linux distributions, shell scripting (Bash), and Python scripting for automation. Ability to automate operational tasks and integrate with DevOps pipelines for infrastructure management."} - {"name":"CI/CD Pipeline Knowledge","description":"Familiarity with continuous integration and continuous deployment pipeline concepts, Git-based workflows, and automated infrastructure deployment practices in cloud environments."} ### experience - {"name":"Senior-Level Cloud Infrastructure Experience","description":"Minimum 5-7 years of progressive experience in cloud infrastructure engineering, with at least 3-4 years focused on cloud networking at scale. Track record of designing and maintaining production cloud network infrastructure for business-critical applications."} - {"name":"Multi-Region and High-Availability Architecture Design","description":"Demonstrated experience architecting and operating multi-region, high-availability cloud network infrastructure. Experience managing global scale networking with strict availability, latency, and redundancy requirements typical of financial technology platforms."} - {"name":"Financial Technology or Fintech Platform Experience (Preferred)","description":"Experience in fintech, local banking infrastructure, or high-concurrency, high-availability financial networks with strict information security and regulatory compliance requirements such as PCI-DSS or SOX."} - {"name":"On-Call and Incident Response Experience","description":"Experience participating in global on-call rotations and managing escalations for production cloud infrastructure issues. Demonstrated ability to troubleshoot complex networking issues and maintain service level objectives for mission-critical systems."} ## Skills ### required - {"name":"AWS Cloud Networking","description":"Expert-level proficiency in AWS networking services including VPC, Transit Gateway, Direct Connect, AWS Network Firewall, Route Tables, and multi-account networking architectures at scale."} - {"name":"Terraform and Infrastructure as Code","description":"Advanced Terraform skills for provisioning, managing, and maintaining cloud infrastructure. Experience with modular Terraform design, state management, and Git-driven infrastructure workflows."} - {"name":"BGP and Dynamic Routing","description":"Strong understanding of BGP protocol, dynamic routing concepts, and practical experience implementing BGP in cloud and hybrid networking scenarios. Ability to troubleshoot routing issues in complex multi-cloud environments."} - {"name":"Network Architecture Design","description":"Ability to design scalable, secure, and highly available network architectures for multi-region deployments. Experience with network segmentation, security group management, and network flow optimization."} - {"name":"Linux and Bash Scripting","description":"Proficiency with Linux operating systems and Bash scripting for automation tasks. Ability to write Python scripts for infrastructure automation and integration with DevOps tooling."} - {"name":"DevOps and CI/CD Practices","description":"Strong understanding of DevOps methodologies, Git-based workflows, and continuous integration/continuous deployment pipeline concepts. Experience integrating infrastructure code into automated deployment pipelines."} ### preferred - {"name":"GCP Cloud Networking","description":"Hands-on experience with Google Cloud Platform networking services including Shared VPC, Cloud Router, Cloud Interconnect, and multi-region GCP architecture. Familiarity with GCP-specific networking patterns and best practices."} - {"name":"Advanced Networking Certifications","description":"Advanced certifications such as CCNP, JNCIP, or AWS Certified Advanced Networking - Specialty demonstrating deep expertise in network architecture and cloud networking specialization."} - {"name":"Financial Compliance and Security","description":"Understanding of financial industry regulations including PCI-DSS, SOX, and local banking compliance requirements. Experience designing networks that meet strict security and audit requirements for regulated financial services."} - {"name":"Hybrid Connectivity and VPN Technologies","description":"Experience with hybrid cloud connectivity, IPsec VPN configuration, and managing connections to on-premises and third-party infrastructure. Knowledge of Site-to-Site VPN and Direct Connect optimization."} - {"name":"Network Observability and Monitoring","description":"Experience implementing network observability solutions, monitoring tools, and network performance analytics. Familiarity with tools for network visualization, traffic analysis, and anomaly detection."} - {"name":"AI-Assisted Operational Tools","description":"Experience leveraging AI and machine learning tools to optimize operational workflows, automate network troubleshooting, and improve infrastructure management efficiency."} ## Tech stack ### tools - {"name":"AWS Transit Gateway","description":"AWS networking service for connecting multiple VPCs and on-premises networks with centralized routing and management at scale."} - {"name":"AWS Direct Connect","description":"Dedicated network connection service for establishing consistent, low-latency connectivity between on-premises infrastructure and AWS networks."} - {"name":"AWS Network Firewall","description":"Managed firewall service for protecting VPCs with centralized network-layer threat protection and advanced security capabilities."} - {"name":"GCP Shared VPC","description":"Google Cloud networking architecture for sharing VPC networks across multiple projects with centralized network management."} - {"name":"GCP Cloud Router","description":"Dynamic routing service for managing BGP connections and multi-region network routing within Google Cloud Platform."} - {"name":"Git and CI/CD Pipelines","description":"Version control and continuous integration/deployment systems for managing infrastructure code and automated deployment workflows."} - {"name":"BGP Routing Protocol","description":"Border Gateway Protocol for dynamic routing between cloud providers, on-premises infrastructure, and external banking partner networks."} - {"name":"IPsec VPN","description":"Virtual private network encryption protocol for secure hybrid connectivity between cloud environments and on-premises systems."} ### others - {"name":"Multi-Region Architecture","description":"Design and operational patterns for deploying highly available, geographically distributed cloud infrastructure across multiple cloud regions."} - {"name":"Network Security and Compliance","description":"Implementation of network security controls, compliance monitoring, and regulatory adherence for financial technology platforms."} - {"name":"High-Availability Infrastructure","description":"Architectural patterns and operational practices for designing and maintaining mission-critical infrastructure with strict SLA requirements."} - {"name":"Cloud Networking Best Practices","description":"Industry-standard approaches to cloud network architecture, security, scalability, and operational excellence."} ### databases ### languages - {"name":"Python","description":"Python scripting for infrastructure automation, network tooling, and DevOps integration within cloud networking workflows."} - {"name":"Bash","description":"Bash shell scripting for Linux system administration, infrastructure automation, and operational task scripting."} ### frameworks - {"name":"Terraform","description":"Infrastructure as Code framework for provisioning, managing, and versioning cloud network infrastructure across AWS and GCP with Git-driven CI/CD integration."} ## Benefits ### benefits - {"name":"Global Career Growth","description":"Develop your expertise while working on mission-critical infrastructure for a global fintech platform used by 250,000+ businesses worldwide. Access accelerated learning opportunities and cross-functional collaboration with world-class infrastructure and platform engineering teams across 27 global offices."} - {"name":"Equity and Stock Options","description":"Participate in company equity through stock option grants as part of senior-level compensation package. Share in Airwallex's growth as a $11 billion valued company backed by leading investors including T. Rowe Price, Visa, Mastercard, Sequoia, and Salesforce Ventures."} - {"name":"Competitive Benefits Package","description":"Comprehensive benefits including health insurance, retirement contributions, and wellness programs designed for international teams working across multiple time zones and office locations."} - {"name":"Professional Development","description":"Access to training, certification support, and continuing education resources. Work with cutting-edge cloud technologies and AI-assisted tools to optimize your operational workflows and infrastructure management practices."} - {"name":"Mission-Driven Work","description":"Build the global payments and financial platform of the future, directly impacting the growth and success of businesses worldwide. Work on zero-to-one infrastructure initiatives that solve complex, high-visibility problems at global scale."} - {"name":"Founder-Like Ownership","description":"Experience true ownership and impact on infrastructure decisions. Work with a builder mindset in an organization that values real impact, deep ownership, and end-to-end problem solving with strong judgment and first-principles thinking."} ## Compensation - **max:** 200000 - **min:** 140000 - **currency:** USD - **stockOptions:** true ## Interview process ### steps ## Full description ## **About Airwallex** Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 250,000 businesses worldwide – including Brex, Navan, Qantas, SHEIN and many more – with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale. Proudly founded in Melbourne, we have a team of over 2,300 of the brightest and most innovative people in tech across 27 offices around the globe. Valued at US$11 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you’re ready to do the most ambitious work of your career, join us. ## **Attributes We Value** We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you’re motivated by our mission and [operating principles](https://www.airwallex.com/us/operating-principles). You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor. You're humble and collaborative; turn zero‑to‑one ideas into real products, and you “get stuff done” end-to-end. You use AI to work smarter and solve problems faster. Here, you’ll tackle complex, high‑visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let’s build what’s next. ### About the Team As Airwallex’s engineering organization matures, the Infrastructure team builds and scales our globally distributed financial platform. We focus on high availability, security, and cloud scalability while empowering developer productivity across global regions. ### What You’ll Do * **Cloud Network Architecture:** Design, build, and optimize highly available, multi-account, and multi-region **AWS and GCP cloud network architectures** (Layer 3 routing, Transit Gateway, Shared VPC, Cloud Router, Direct Connect). * **Infrastructure as Code (IaC):** Automate and manage global cloud network infrastructure using **Terraform** through Git-driven CI/CD pipelines. * **Hybrid & Cross-Cloud Connectivity:** Manage BGP routing, IPsec VPNs, and dynamic cloud routing between public clouds (AWS/GCP), regional POPs, and external banking partners under strict financial regulatory requirements. * **Operational Excellence & Observability:** Serve as an escalation point for complex cloud networking issues, improve network visibility, and participate in a global on-call rotation. * **Cross-functional Collaboration:** Work closely with Security, DevOps, and Platform teams to build secure Landing Zones and automated network controls. ### Requirements **1\. Cloud & DevOps Experience** * **Solid AWS Design Experience:** hands-on experience designing and operating AWS network environments at scale (VPC, TGW, Route Tables, Direct Connect, AWS Network Firewall). * **Infrastructure as Code:** Proficiency in **Terraform** (or equivalent IaC tools) for provisioning and automating cloud network components. * **GCP / Multi-Cloud Exposure:** Practical experience with GCP networking concepts (Shared VPC, Cloud Router) or multi-cloud environments. * **DevOps Alignment:** Familiarity with Linux distributions, scripting (Python or Bash), and CI/CD pipelines. **2\. Networking Fundamentals** * **Networking Fundamentals:** Strong knowledge of core routing and switching, subnetting, TCP/IP, and BGP dynamic routing principles. * **Certification / Experience:** Holds or has equivalent hands-on experience equal to **Associate-level networking certifications** (e.g., CCNA, JNCIA-Junos, HCIA, Aruba ACA, Network+, or AWS Certified Advanced Networking - Specialty / GCP PCNE). ### Nice to Haves * Experience in Fintech, local banking, or high-concurrency/high-availability financial networks with strict information security requirements. * Familiarity with GCP-preferred architectures * Advanced certifications (CCNP/JNCIP or AWS Certified Advanced Networking - Specialty). * AI-assisted workflows and modern operational tools integration. ## **Applicant Safety Policy: Fraud and Third-Party Recruiters** _To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @_[_airwallex.com_](http://airwallex.com) _email address. Please apply only through_ [_careers.airwallex.com_](http://careers.airwallex.com) _or our official LinkedIn page._ _Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary._ ## **Equal opportunity** Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don’t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.