WHO WE ARE

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai

ABOUT THE ROLE: Senior Member of Technical Staff, Cloud Networking & Network Security

We're seeking a Senior Member of Technical Staff to own the design and delivery of cloud networking features that power enterprise multi-cloud deployments. You'll tackle complex challenges spanning routing, NAT, IPSec/VPN tunneling, traffic engineering, firewall enforcement, and network observability across AWS, Azure, GCP, and OCI. This role bridges strong individual contribution with growing technical influence, requiring 2–5 years of hands-on experience in cloud networking, routing protocols, VPN technologies, or network security. You'll take technical ownership from design through production delivery, with increasing influence across the engineering team.

KEY RESPONSIBILITIES

Design and implement cloud networking features across control plane and data plane systems, authoring design documents and driving features from conception through production delivery.
Build and troubleshoot multi-cloud network topologies including VPC/VNet segmentation, routing tables, cloud gateways, NAT gateways, security groups, and cloud-native connectivity models across AWS, Azure, GCP, and OCI.
Implement and troubleshoot routing protocols (BGP, policy-based routing), IPSec/VPN configurations (site-to-site, route-based, IKEv1/IKEv2), and NAT systems (SNAT/DNAT).
Write production-grade code in Python and/or Go for networking services, agents, and tooling; develop comprehensive unit, integration, and end-to-end tests for networking components.
Debug complex networking issues using packet analysis tools (tcpdump, Wireshark), cloud-native diagnostics, and IPSec tools; investigate and resolve issues across lab, staging, and production environments.
Improve telemetry, logging, and alerting for networking and VPN systems to enhance operational visibility and reliability.
Collaborate with senior engineers on architecture discussionsparticipate in code and design reviews, mentor junior team members on networking best practices, and document runbooks and designs.

REQUIREMENTS / QUALIFICATIONS

Bachelor's degree in Computer Science, Electrical Engineering, Networking, or a related field.
3+ years of professional engineering experience building networking-intensive systems at a networking company, cloud infrastructure provider, or equivalent organization.
Hands-on experience in at least one of: cloud networking (AWS VPC, Azure VNet, GCP VPC, OCI VCN), routing protocols (BGP, OSPF, static routing), IPSec/VPN technologies, or network security product development.
Strong understanding of IP networking fundamentals (TCP/IP, ARP, ICMP, DNS, subnetting, CIDR) and working knowledge of routing protocols, IPSec/IKEv2 tunneling, VPN architectures, NAT, and firewall concepts.
Proficiency in Python and/or Go for writing clean, maintainable, production-grade code; comfort with Linux networking tools (iptables, ip route, tcpdump, traceroute) and shell scripting.
Experience with version control (Git) and CI/CD workflows; demonstrated ability to debug complex networking issues methodically.
Strong written and verbal communication skills; ability to independently own features from design through production delivery.

NICE TO HAVE

Experience with advanced cloud networking services including transit gateways, peering, private link/endpoints, and load balancers across multi-cloud environments.
Experience with Kubernetes networking including CNI plugins, service mesh technologies, and network policies in containerized environments.
Experience with network automation frameworks such as Terraform or Ansible, or cloud-native APIs for infrastructure-as-code provisioning.
Familiarity with distributed systems concepts applied to networking, including consistency guarantees, fault tolerance, and replication strategies.

Sr. MTS Software Development Engineer