Cloud Egress Address-Space Recovery Leader

The mandate

The platform operates behind shared cloud egress gateways whose address space and connection capacity must be coordinated with carrier, customs and payment partner allowlists. Applications handle shipment creation and status exchange with external partners across multiple regions. The role follows a leadership departure and will consolidate address, connection and partner capacity into one model that teams can scale predictably.

The interim must join in Mexico City within ten business days and lead for eight months. A permanent egress-reliability search begins once two regions operate the common connection-capacity and partner-change model, expected in month three. The successor will overlap for four weeks and must command a peak rehearsal, gateway isolation and the closing partner-failure exercise.

Handover requires address and port demand to reconcile to connection behaviour by service and destination; critical partners to have controlled source ranges and tested alternatives; gateway scaling to preserve allowlist and inspection state; two regional peak and failure drills to pass; outside-in partner reachability to be visible; and the permanent leader to accept capacity, exception and relationship registers.

The interim may freeze network releases, reallocate egress, reserve source ranges, set connection-pooling rules, sequence partner changes, redirect teams and approve up to MXN 180 million within the recovery. Permanent hiring, customs-policy change, new carrier contracts, partner commercial terms and decisions above MXN 35 million require council approval. The seat cannot bypass required inspection or partner authentication.

Warehouse systems, routing optimisation, customer-interface work and wholesale redesign of partner applications are explicitly out of scope. The assignment covers cloud address and port capacity, NAT and gateway behaviour, connection reuse, partner allowlists, regional failover, outside-in evidence and the operating ownership connecting platforms with external logistics networks.

Why this seat is open

The outage revealed that compute scaling increased demand on a finite translation and partner-trust boundary that no team owned end to end. Leadership departure left application, network and integration teams treating selective external failure as somebody else’s healthy component. Temporary authority is required to establish one egress-capacity model, exercise partner paths and transfer permanent command before the next cross-border peak.

What you will own

• Reconstruct requests, connections, retries, port allocation, translation, inspection, source addresses, allowlists and partner failures by region.
• Define connection and address capacity for services, destinations, protocols, pooling, timeout, retries, peaks and regional evacuation.
• Decide gateway topology, source-range allocation, scale behaviour, failover and partner notification according to shipment consequence.
• Reconcile partner allowlists, certificates, authentication, test endpoints, change lead times and emergency contact ownership.
• Install outside-in evidence for DNS, route, connection, TLS, application response and completed shipment exchange from approved sources.
• Command rehearsals involving port exhaustion, gateway loss, new address activation, partner block, inspection degradation and regional failover.
• Transfer capacity models, address inventories, partner controls, exceptions, exercises and escalation authority through successor-led operation.

Candidate qualifications

• Held senior authority for cloud egress, NAT, gateway or partner connectivity supporting high-volume transaction services.
• Recovered ephemeral-port or connection-state exhaustion concealed by healthy compute and application metrics.
• Managed source-address changes across large external allowlist populations with controlled evidence and rollback.
• Designed connection pooling, timeout, retry and gateway capacity as one system rather than independent tuning choices.
• Built outside-in monitoring that distinguished partner rejection from internal application and network health.
• Handed a cross-region connectivity recovery to permanent leadership through peak and partner-failure exercises.