Senior Software Engineer, Network Infrastructure
About The Position
Commure is hiring a Senior Software Engineer for its Network Infrastructure team. This hands-on individual-contributor role owns the networking backbone of the company’s multi-cloud, application, and corporate infrastructure, supporting multiple products and engineering teams. The engineer will make architectural decisions, implement core networking systems, and establish patterns used across the organization. The network infrastructure spans GCP, AWS, and Azure, with infrastructure managed as code using Terraform and controller-based tools. Argo CD drives deployment, Helm packages applications, and Prometheus, Grafana, and OpenTelemetry support observability. The network is being developed toward cloud-native patterns, including Kubernetes-native networking, eBPF, Gateway API, and service mesh; the engineer will help define its direction. The role encompasses multi-cloud networking, hybrid and on-prem connectivity, Kubernetes and service networking, edge services, network security, observability, and GitOps-based automation. Employees must follow the organization’s information security policies, report confirmed or potential risks to the information security office, and attest to these requirements upon hire and annually.
Requirements
- At least 6 years of experience in cloud-native networking or infrastructure engineering.
- Deep knowledge of network fundamentals, including TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking.
- Experience with public cloud networking across GCP, AWS, and Azure.
- Experience with Kubernetes and cloud-native networking, including CNI, eBPF, Gateway API, Envoy, and Istio.
- Experience with infrastructure-as-code tools such as Terraform or Pulumi.
- Experience designing and operating VPN and site-to-site connectivity at scale.
- Experience with BGP route filtering, multipath routing, and traffic engineering.
- Experience with network security, including firewalls, WAF, DDoS mitigation, segmentation, and zero-trust.
- Experience with network observability and performance troubleshooting, including flow logs, packet analysis, latency, and packet loss.
- Ability to comply with information security policies, report security risks, and attest to security requirements upon hire and annually.
Nice To Haves
- Experience with Cloud Interconnect, Dedicated Interconnect, Direct Connect, or ExpressRoute.
- Experience with kernel network tuning and BGP route optimization.
- Experience running DNS infrastructure at scale.
- Experience with on-premises or hybrid environments and data center networking.
- Contributions to CNCF networking projects such as Cilium, Envoy, or Istio.
- Experience with network automation and testing, including GitOps, Batfish, or containerlab.
- Experience in regulated industries with HIPAA, SOC 2, or PCI obligations.
Responsibilities
- Own the multi-cloud network foundation, including VPC design, routing, transit hubs, IPAM, IPv6, and multi-region failover across GCP, AWS, and Azure, managed with Terraform and Crossplane.
- Build hybrid and on-prem connectivity using IPsec VPN, BGP, Cloud Interconnect, Direct Connect, or ExpressRoute, and engineer traffic for data centers, regional hubs, and remote offices.
- Design Kubernetes networking, including CNI, Cilium, eBPF, Gateway API, Envoy ingress, Istio or an equivalent service mesh, and mTLS.
- Operate edge networking, including load balancing, DNS, WAF, DDoS mitigation, and rate limiting.
- Secure the network by default through firewalls, segmentation, zero-trust access, and encryption in transit; partner with Security on policy-as-code addressing HIPAA and SOC 2 requirements.
- Own network observability, including flow logs, packet capture, and eBPF visibility with Hubble, integrated with OpenTelemetry, Prometheus, and Grafana.
- Manage the network as code using GitOps with Argo CD, pre-merge validation, and self-service modules for product teams.
- Troubleshoot complex networking issues involving TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking.
- Follow organizational information security policies and report confirmed or potential security events or risks to the information security office.
- Attest to information security requirements upon hire and annually.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
