Senior Software Engineer, Network Infrastructure

About the Role

We're hiring a Senior Software Engineer on the Network Infrastructure team to own the networking backbone of our multi-cloud, application, and corporate infrastructure that every other engineering team at Commure relies on. This is a horizontal team supporting multi-product infrastructure, and the network layer is yours to design, build, and operate end-to-end:

• Multi-cloud network foundation and IaC

• Hybrid and on-prem connectivity

• Kubernetes and service networking

• Edge, load balancing, and DNS

• Network security and zero-trust access

• Network observability

• Network automation using GitOps

The stack today runs on public cloud (GCP, AWS, and Azure), with all infrastructure defined as code (Terraform and controller-based). Argo CD drives deployment; Helm handles application packaging; Prometheus, Grafana, and OpenTelemetry power observability. Networking is an active build-out toward cloud-native patterns (Kubernetes-native networking, eBPF, Gateway API, service mesh), and the shape of it is yours to define.

This is a hands-on IC role with broad scope. You'll make architectural calls, write the code that matters most, and set the patterns other teams build on.

What You'll Do

You'll own several of these verticals within the team's scope end-to-end.

• Own the multi-cloud network foundation: VPC design, routing, transit hubs, IPAM and IPv6, and multi-region failover across GCP, AWS, and Azure. Managed as code with Terraform and Crossplane

• Build hybrid and on-prem connectivity: IPsec VPN, BGP, Cloud Interconnect / Direct Connect / ExpressRoute, and traffic engineering for data centers, regional hubs, and remote offices

• Design the Kubernetes networking layer: CNI (Cilium, eBPF), ingress via Gateway API and Envoy, Istio (or equivalent) service mesh, and mTLS

• Run the edge: load balancing, DNS, WAF, DDoS mitigation, and rate limiting

• Secure the network by default: firewalls, segmentation, zero-trust access, and encryption in transit. Partner with Security on policy-as-code that meets HIPAA and SOC 2

• Own network observability: flow logs, packet capture, and eBPF visibility (Hubble), wired into OpenTelemetry, Prometheus, and Grafana

• Treat the network as code: GitOps with Argo CD, pre-merge validation, and self-serve modules for product teams

• Debug the hard problems: TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking

What You Have

• 6+ years of experience in cloud native networking or infrastructure engineering

• Deep expertise in network fundamentals: TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking

• Experience with public cloud networking (GCP, AWS, Azure)

• Experience with Kubernetes and cloud-native networking (CNI, eBPF, Gateway API, Envoy, Istio)

• Experience with Infrastructure-as-Code (Terraform, Pulumi)

• Experience designing and operating VPN and site-to-site connectivity at scale

• Experience with BGP route filtering, multi-path routing, and traffic engineering

• Experience with network security: firewalls, WAF, DDoS mitigation, segmentation, and zero-trust

• Experience with network observability and performance troubleshooting (flow logs, packet analysis, latency, packet loss)

Preferred

• Experience with Cloud Interconnect (Dedicated Interconnect, Direct Connect, ExpressRoute)

• Experience with kernel network tuning and BGP route optimization

• Experience running DNS infrastructure at scale

• Experience with on-prem or hybrid environments and data center networking

• Contributions to CNCF networking projects (Cilium, Envoy, Istio)

• Experience with network automation and testing (GitOps, Batfish, containerlab)

• Experience in regulated industries with HIPAA, SOC 2, or PCI obligations

You don't need to check every box: strong network fundamentals, cloud native or Kubernetes background matter most.