Senior Software Development Engineer

Adobe•San Jose, CA

9d•$139,000 - $257,550

About The Position

We are seeking a Mid-to-Senior Network Software Engineer to help design, build, and operate the networking platform that powers large-scale cloud-native infrastructure. This role sits at the intersection of software engineering, platform engineering, distributed systems, cloud networking, and networking infrastructure. You will work on technologies including Kubernetes, Cilium/eBPF, Envoy Proxy, Contour, service mesh, and cloud networking across AWS and Azure. A key part of this role is building and evolving custom networking control planes that translate high-level application and networking intent into dynamic proxy and dataplane configuration.

Requirements

Software Engineering: 4+ years of experience developing production software, infrastructure platforms, networking systems, or distributed systems.
Programming: Strong proficiency in Go and experience with one or more languages such as Python, Rust
Networking Control Planes: Experience building, extending, or maintaining networking control-plane implementations similar to Istio, Contour, Envoy Gateway, or other Envoy/xDS-based platforms.
Kubernetes Networking: Strong understanding of CNI, Services, NetworkPolicy, Ingress, Gateway API, DNS, service discovery, load balancing, and pod networking.
Networking Fundamentals: Knowledge of TCP/IP, UDP, DNS, HTTP/1.1, HTTP/2, HTTP/3/QUIC, gRPC, TLS/mTLS, NAT, routing, and load balancing.
Proxy & Application Networking: Direct involvement in using Envoy Proxy, Contour, Istio, NGINX, HAProxy, or similar L4/L7 proxy technologies.
Linux Networking: Experience fixing network namespaces, routing tables, iptables/nftables, sockets, conntrack, DNS, and packet-level traffic flows.
Cloud Networking: Experience with networking in at least one major cloud platform such as AWS, Azure.
Infrastructure Automation: Experience with GitOps, Argo CD, Helm, and CI/CD automation.

Nice To Haves

Experience designing or contributing to a custom Envoy-based control plane.
Experience with Envoy xDS APIs (LDS, RDS, CDS, EDS) and dynamic configuration management.
Experience with Contour, Istio, Envoy Gateway, Gateway API, or similar application-networking platforms.
Experience developing Kubernetes CRDs, controllers, operators, admission webhooks, or API extensions.
Hands-on experience with Cilium based networking.
Experience operating networking infrastructure across large multi-cluster and multi-region Kubernetes environments.
Experience with Hubble, OpenTelemetry, Prometheus, Grafana, distributed tracing, or network-flow analytics.

Responsibilities

Build Network Control Planes: Design, develop, and operate custom Kubernetes-native networking control planes, similar to architectures used by Istio and Contour, that translate declarative APIs and configuration into dynamically programmed data planes.
Program Envoy via xDS: Build and maintain control-plane integrations using Envoy xDS APIs, including LDS, RDS, CDS, and EDS, to dynamically configure listeners, routes, clusters, endpoints, and traffic policies.
Build Cloud-Native Networking Platforms: Design and operate Kubernetes networking capabilities including CNI, network policy, service routing, load balancing, DNS.
Work with Cilium: Deploy, operate, and optimize Cilium-based Kubernetes networking, including network policy and observability
Extend Proxy Capabilities: Develop or integrate Envoy filters, extensions, external authorization, traffic policies, authentication/authorization mechanisms, and other L4/L7 capabilities.
Design Cloud Networking: Work with networking services across AWS and Azure, including VPC/VNet networking, load balancers, NAT, routing, private connectivity.
Build Network Observability: Develop telemetry and troubleshooting capabilities using metrics, logs, tracing, network flows, Hubble, OpenTelemetry, Prometheus, and Grafana.
Drive Reliability at Scale: Participate in architecture reviews, production readiness, incident response, root-cause analysis and reliability improvements for critical networking infrastructure.
Shape Next-Generation Networking: Evaluate emerging technologies including Gateway API, eBPF networking, AI/agent gateways, MCP, Agent-to-Agent (A2A) protocols, and agent/service mesh architectures.
Participate in On-Call Rotation: Participate in the team's on-call rotation to support production networking infrastructure, solve incidents, restore service, and drive root-cause analysis and long-term reliability improvements.