Software Engineer

WHO WE ARE

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai

ABOUT THE ROLE: Senior Member of Technical Staff, Cloud Networking & Network Security

We're seeking a Senior Member of Technical Staff to own the design and delivery of cloud networking features that power enterprise multi-cloud deployments. You'll tackle complex challenges spanning routing, NAT, IPSec/VPN tunneling, traffic engineering, firewall enforcement, and network observability across AWS, Azure, GCP, and OCI. This role bridges strong individual contribution with growing technical influence, requiring 2–5 years of hands-on experience in cloud networking, routing protocols, VPN technologies, or network security. You'll take technical ownership from design through production delivery, with increasing influence across the engineering team.

KEY RESPONSIBILITIES

• Design and implement cloud networking features across control plane and data plane systems, authoring design documents and driving features from conception through production delivery.

• Build and troubleshoot multi-cloud network topologies including VPC/VNet segmentation, routing tables, cloud gateways, NAT gateways, security groups, and cloud-native connectivity models across AWS, Azure, GCP, and OCI.

• Implement and troubleshoot routing protocols (BGP, policy-based routing), IPSec/VPN configurations (site-to-site, route-based, IKEv1/IKEv2), and NAT systems (SNAT/DNAT).

• Write production-grade code in Python and/or Go for networking services, agents, and tooling; develop comprehensive unit, integration, and end-to-end tests for networking components.

• Debug complex networking issues using packet analysis tools (tcpdump, Wireshark), cloud-native diagnostics, and IPSec tools; investigate and resolve issues across lab, staging, and production environments.

• Improve telemetry, logging, and alerting for networking and VPN systems to enhance operational visibility and reliability.

• Collaborate with senior engineers on architecture discussions, participate in code and design reviews, mentor junior team members on networking best practices, and document runbooks and designs.

REQUIREMENTS / QUALIFICATIONS

• Bachelor's degree in Computer Science, Electrical Engineering, Networking, or a related field.

• 1 years of professional engineering experience building networking-intensive systems at a networking company, cloud infrastructure provider, or equivalent organization.

• Hands-on experience in at least one of: cloud networking (AWS VPC, Azure VNet, GCP VPC, OCI VCN), routing protocols (BGP, OSPF, static routing), IPSec/VPN technologies, or network security product development.

• Strong understanding of IP networking fundamentals (TCP/IP, ARP, ICMP, DNS, subnetting, CIDR) and working knowledge of routing protocols, IPSec/IKEv2 tunneling, VPN architectures, NAT, and firewall concepts.

• Proficiency in Python and/or Go for writing clean, maintainable, production-grade code; comfort with Linux networking tools (iptables, ip route, tcpdump, traceroute) and shell scripting.

• Experience with version control (Git) and CI/CD workflows; demonstrated ability to debug complex networking issues methodically.

• Strong written and verbal communication skills; ability to independently own features from design through production delivery.

NICE TO HAVE

• Experience with advanced cloud networking services including transit gateways, peering, private link/endpoints, and load balancers across multi-cloud environments.

• Experience with Kubernetes networking including CNI plugins, service mesh technologies, and network policies in containerized environments.

• Experience with network automation frameworks such as Terraform or Ansible, or cloud-native APIs for infrastructure-as-code provisioning.

• Familiarity with distributed systems concepts applied to networking, including consistency guarantees, fault tolerance, and replication strategies.