Principal Cloud Software Engineer

Team: Web Applications and Services

Location: US-MA-Natick

Salary Range: USD 257,300 - 160,800

Job Summary

MathWorks has a hybrid work model that enables staff members to split their time between office and home. The hybrid model provides the advantage of having both in-person time with colleagues and flexible at-home life optimizations. Learn More: https://www.mathworks.com/company/jobs/resources/applying-and-interviewing.html#onboarding.

MathWorks seeks a Principal Cloud Software Engineer to design, build, and architect cloud platform systems that support deploying MathWorks services across a range of environments - from MathWorks-hosted SaaS to customer-managed private cloud. This role combines hands-on engineering with architectural leadership, working across multiple systems within the cloud platform organization and consulting on systems developed by adjacent teams. You will shape technical direction across deployment, identity, networking, observability, and security - writing code, reviewing designs, and mentoring senior engineers.

MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities

• Design, build, and evolve core platform systems including deployment pipelines, control-plane services, tenant lifecycle management, identity integration, and observability infrastructure
• Work across multiple cloud-native systems, contributing where the hardest cross-cutting problems are - multi-tenancy, namespace isolation, cross-boundary networking, and secrets management
• Serve as a senior architectural resource across the organization, reviewing designs and providing guidance on scalability, fault tolerance, availability, and security
• Consult on systems owned by other teams - evaluate designs, identify systemic risks, and recommend approaches that align with broader platform direction
• Architect for customer-managed deployment topologies including PrivateLink, namespace-scoped RBAC, IRSA/Pod Identity, hybrid control planes, and cross-org trust boundaries
• Turn patterns that work for individual deployments into repeatable, productized capabilities that scale
• Mentor junior and senior engineers through design reviews, architecture critiques, and pairing on complex problems
• Help grow cloud-native expertise (Kubernetes, Helm, IaC, OTel) within the organization

Minimum Qualifications

• A bachelor's degree and 10 years of professional work experience (or equivalent experience) is required.

Additional Qualifications

Must Have:

• Deep, hands-on experience designing and building large-scale distributed systems
• Expert-level AWS knowledge (VPC architecture, IAM, EKS, PrivateLink, multi-account patterns)
• Kubernetes at depth (namespace isolation, RBAC, IRSA/Pod Identity, Helm, multi-tenant patterns)
• Proven ability to influence technical direction across multiple teams without direct authority
• Strong security architecture background, particularly in shared-responsibility and cross-org trust models