> Markdown version of [/jobs/ext/4028764-principal-infrastructure-architect-cloud-saas-platforms](https://www.wearedevelopers.com/jobs/ext/4028764-principal-infrastructure-architect-cloud-saas-platforms). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Infrastructure Architect - Cloud & SaaS Platforms

- **Company:** McAfee, Inc.
- **Location:** Santa Clara, CA, United States
- **Experience:** Expert
- **Salary:** $171,960
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, User Authentication, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Engineering, Databases, Data Systems, Data Visualization, Amazon DynamoDB, Github, Identity and Access Management, Python (Programming Language), Online Analytical Processing, Networking Basics, OAuth, Octopus Deploy, Online Transaction Processing, OpenID, PCI Data Security Standards, Redis, Cloud Services, Prometheus, Zero Trust Network Access, WebSocket, Datadog, Aerospike, Pulumi, Istio, Large Language Models, Grafana, Generative AI, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Backend, Event Driven Architecture, Gitlab-ci, Kubernetes, Druid, Hashicorp, Real Time Data, Apache Kafka, Linkerd (Service Mesh), Vertica, Api Gateway, Amazon Simple Queue Service (SQS), Terraform, Microservices
- **Published:** October 30, 2026
- **Apply:** https://dejobs.org/x/x/2F2E5E31C9FD4035985EECD8E41BA8C6/job/

## About the Role

* 10+ years of professional experience in infrastructure engineering and architecture, with a proven track record of managing large-scale cloud deployments in AWS (primary), GCP, or Azure.
 * Kubernetes Expert: Deep, hands-on mastery of Kubernetes and EKS , including experience with custom controllers, operators, and migrating stateful/stateless workloads from VMs to containers.
 * Database Reliability: Strong experience architecting infrastructure for high-scale data systems, specifically real-time stores ( Aerospike, Redis ) and analytics engines ( Druid, ClickHouse ).
 * Security & Compliance: Extensive experience designing secure infrastructure, including implementation of Zero Trust networks, WAFs, and secret management systems. Familiarity with compliance standards (SOC2, PCI-DSS) is a plus.
 * Observability Stack: Proven ability to build observability pipelines from scratch using OpenTelemetry collectors and backend visualization tools (Prometheus/Grafana/Datadog).
 * Automation & Scripting: Expert-level proficiency in Go, Python, or Bash . You automate toil relentlessly and have deep experience with CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD).
 * Networking Fundamentals: Deep understanding of cloud networking (VPC, Transit Gateways, Direct Connect) and protocols (gRPC, HTTP/2, WebSocket, QUIC).

## Description

* Cloud Native Strategy & Migration: Lead the architectural design and execution of migrating legacy EC2-based workloads to Amazon EKS and Kubernetes. Define standards for multi-region availability, auto-scaling, and spot instance orchestration.
 * Advanced Traffic Management: Architect and deploy high-performance API Gateways and specialized LLM Gateways to manage traffic for Generative AI workloads. Implement Service Mesh (e.g., Istio, Linkerd) for advanced traffic splitting, mTLS, and observability.
 * Real-Time Data Infrastructure: Design robust infrastructure for diverse storage engines, including AWS-native databases (DynamoDB, Aurora), OLAP systems, and real-time databases like Aerospike and Druid to support sub-millisecond latency requirements.
 * Event-Driven Backbone: Architect scalable Pub/Sub messaging systems (Kafka, SNS/SQS, Pulsar) to decouple microservices and enable event-driven architectures at internet scale.
 * Comprehensive Observability: Define and implement a unified observability strategy based on OpenTelemetry (OTLP) standards. Integrate platforms like Grafana, Datadog, and Graylog to provide "single pane of glass" visibility into logs, metrics, and traces.
 * Identity & Security Engineering: Modernize Authentication and Authorization systems (OIDC, OAuth2, SPIFFE/SPIRE). Deploy and manage centralized Secret Stores (HashiCorp Vault, AWS Secrets Manager), security gateways, and automated certificate management systems.
 * Infrastructure as Code (IaC): Champion a "GitOps" culture by treating infrastructure as software. Enforce best practices using Terraform, Crossplane, or Pulumi , ensuring all environments are reproducible and audit-compliant.
 * Technical Leadership: Mentor senior infrastructure engineers, drive "Well-Architected" reviews, and collaborate with software teams to ensure infrastructure supports rapid product iteration.