Want to know if this job is worth applying to?
Lisboa, Portugal
Hybrid
Position Overview:
Intapp is at an inflection point. We just launched Intapp Celeste — our agentic AI platform built for the world's top law, accounting, private capital, and professional services firms. More than 2,700 firms globally rely on our platform, and we're re-architecting everything around AI-native workflows. The Cloud Platform Engineering (CPE) team sits right at the center of that.
This is a cloud networking role at its core. We're expanding into new cloud regions and standing up many more Kubernetes clusters, and we need someone who can design the network — and the network security — that holds it all together across Azure and AWS, for regulated, compliance-heavy clients who can't afford surprises. A big part of the job is designing network security for agentic workloads: how AI agents are isolated, what they're allowed to reach, and how every connection stays governed and auditable. This isn't a keep-the-lights-on role: we want engineers who use AI as a force multiplier in their own work, and there's real scope to shape what secure, multi-region cloud networking looks like as Celeste scales. You'll work closely with the Kubernetes team, with shared services and overlapping responsibilities.
About Intapp:
Intapp, based in Silicon Valley, is a leader in Vertical AI SaaS solutions, collaborating with the world’s top firms globally across accounting, consulting, investment banking, legal, private capital, and real assets. With 20+ years of industry expertise, Intapp's "Intelligence Applied" approach is transforming how businesses operate and leverages a strategic partnership with Microsoft in delivering industry cloud solutions. The company culture promotes accountability, responsibility, and growth in a diverse, inclusive, and collaborative environment. Since going public in 2021 and trading on the NASDAQ, Intapp has expanded to over 1,200 employees globally with development centers in Palo Alto, Charlotte, Belfast, Berlin and Lisbon.
About Lisbon:
Intapp is excited to continue the expansion of its Research & Development center in Lisbon. Lisbon’s tech ecosystem and vibrant community make it an ideal destination for engineers and tech professionals from around the world. The city's reputation for innovation aligns perfectly with Intapp’s mission to leverage AI and cloud-based solutions. Lisbon offers an ideal work-life balance and quality of life, making it an attractive city for top talent. Joining Intapp in Lisbon provides a unique opportunity to help shape the new flagship development center and contribute to high-impact projects in a thriving tech environment.
What you'll do:
Architect and operate the Azure and AWS network as we expand into new regions.
Design network security for agentic workloads — isolation, segmentation, and egress control.
Build cluster networking for a fast-growing Kubernetes fleet.
Define network infrastructure as code with Terraform.
Support and harden Azure Entra ID integration and authentication.
Use AI for anomaly detection, alerting, and automated runbooks.
Partner with the Kubernetes and product engineering teams.
Lead deep dives on complex networking issues.
What you'll need:
4+ years on Azure (AWS or GCP a plus), with cloud networking as a core strength (multi-cloud experience preferred).
Deep networking fundamentals — DNS, routing, firewalls, segmentation, VPN, VNet/VPC concepts.
Experience designing cloud network security and zero-trust controls.
Hands-on Kubernetes networking — CNI, ingress/egress, and network policies.
Identity and authentication experience, such as Azure Entra ID / Microsoft Active Directory
Comfortable using AI tooling in an engineering or operations context.
Automation-first — you write it, not just read it.
Nice to have:
Scaling networks across multiple clouds and many regions or hybrid cloud (on-prem + cloud)). Maintaining large Kubernetes fleet.
AWS/GCP IAM management (IAM policies, users, SSO, service identities)
Hands-on administration experience with enterprise IDM/IAM solutions such as Keycloak, Okta or Ping Identity.
Experience administering GCP IAM
Service mesh — Istio, Linkerd, or Cilium — and east-west policy control.
ELK stack, Prometheus, Grafana, or similar observability tooling.
Securing AI, ML, or agentic workloads at the network layer.
What we offer at Intapp:
Our culture at Intapp emphasizes accountability, responsibility, and growth. We support each other in a positive, open atmosphere that fosters creativity, approachability, and teamwork. We’re committed to creating a modern work environment that’s connected yet flexible, supporting both professional success and work-life balance. In return for your passion, commitment, and collaborative approach, we offer:
A state-of-the-art facility with fully stocked kitchen – only 2-minute walk to/from Gare do Oriente.
A hybrid work system supporting agile and flexible hours.
Attractive compensation – including competitive base pay and performance based variable pay.
Equity/Stock in Intapp.
Opportunity to travel to other development centers for product training and cross-site collaboration.
One time home office stipend.
Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer's leave and paid sick days.
Meal allowance.
Reimbursement for training towards continuing education.
#LI-MT2
Intapp provides equal employment opportunities to all qualified applicants and will make hiring decisions without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristic protected by federal, state or local laws.
Please note: Intapp will not hire through text message, social media, or email alone. We will never extend a job offer unless you have been contacted directly by an Intapp recruiter and have participated in the interview process which will generally consist of 3 or more virtual or in person meetings. Please note that Intapp only uses company email addresses, which contain “@intapp.com” or “@dealcloud.com” to communicate with candidates via email. Intapp will never ask for financial information of any kind or for any payment during the job application process. We post all legitimate job openings on the Intapp Career Site at https://www.intapp.com/working-at-intapp/. If you believe you were a victim of such a scam, you may contact your local authorities. Intapp is not responsible for any claims, losses, damages, or expenses resulting from scammers.