Staff Site Reliability Engineer- Networking

Censys

9d•$172,000 - $233,000•Remote

About The Position

Censys is seeking a Staff Site Reliability Engineer to own networking across its hybrid infrastructure. The platform scans the reachable internet from globally distributed data centers and serves intelligence to customers in real time, making networking a core part of the product. This engineer will set technical direction for networking across data center, cloud, and edge environments; treat network infrastructure as software; and improve reliability for teams that depend on it. The role is fully remote within the United States. The position combines technical leadership and hands-on engineering. It includes designing and automating networking primitives, leading cross-datacenter resilience for the on-premises scanning platform, owning edge protection, establishing standards, mentoring SREs, and serving as a senior escalation point for complex incidents spanning application, Kubernetes, and physical network layers.

Requirements

10+ years of experience in network engineering, SRE, or infrastructure engineering, with production networking ownership and a record of leading technical work across team boundaries.
Deep knowledge of TCP/IP, BGP, anycast, DNS, TLS, and load balancing at scale.
Experience building software to operate networks, such as automation services, health checking, certificate lifecycle management, and traffic management tooling in Go, Python, or a similar language.
Experience operating hybrid environments across physical data centers and public cloud; GCP is preferred.
Experience with Kubernetes networking, including CNI, ingress, and service mesh.
Fluency with infrastructure-as-code and GitOps workflows such as Terraform, Crossplane, or ArgoCD, applied to network infrastructure.
Ability to drive architectural decisions across teams without formal authority, supported by clear written proposals and data.
Strong communication skills, including explaining routing incidents to leadership and BCDR tradeoffs to product management.
Positive, action-oriented attitude, iterative problem-solving, and ownership of outcomes.

Nice To Haves

Experience running traffic management and delivery at large consumer scale, such as streaming, CDN, or global anycast footprints.
History of automating recurring toil, such as TLS certificate rotation, failover testing, or capacity forecasting.
Familiarity with internet measurement, scanning infrastructure, or the security domain, including how scan traffic interacts with peering relationships and abuse reporting.
Interest in using AI and LLM tools to augment infrastructure work, including incident analysis and configuration generation.
External knowledge sharing through conference talks, open-source contributions, or technical writing.

Responsibilities

Own technical direction for networking across data center fabrics, GCP VPC design, Kubernetes networking, and edge environments.
Design and automate networking primitives, including load balancing, ingress, routing, DNS, BGP peering, and TLS termination, and deliver network changes through GitOps pipelines.
Lead the cross-datacenter resiliency program for the on-premises scanning platform, including failover architecture and workloads across globally distributed data centers.
Own edge protection, including DDoS mitigation, WAF strategy, and traffic engineering for scan and API infrastructure.
Set networking and reliability standards, identify architectural opportunities and technical debt, and gain cross-team support for multi-quarter infrastructure initiatives.
Mentor the SRE team and build its networking expertise through durable engineering standards.
Remain hands-on and act as a senior escalation point for complex incidents spanning application, Kubernetes, and physical network layers.