Senior Software Engineer, Network Infrastructure

About the Role

We're hiring a Senior Software Engineer on the Network Infrastructure team to own the networking backbone of our multi-cloud, application, and corporate infrastructure that every other engineering team at Commure relies on. This is a horizontal team supporting multi-product infrastructure, and the network layer is yours to design, build, and operate end-to-end:

• Multi-cloud network foundation and IaC
• Hybrid and on-prem connectivity
• Kubernetes and service networking
• Edge, load balancing, and DNS
• Network security and zero-trust access
• Network observability
• Network automation using GitOps

The stack today runs on public cloud (GCP, AWS, and Azure), with all infrastructure defined as code (Terraform and controller-based). Argo CD drives deployment; Helm handles application packaging; Prometheus, Grafana, and OpenTelemetry power observability. Networking is an active build-out toward cloud-native patterns (Kubernetes-native networking, eBPF, Gateway API, service mesh).

What You'll Do

• Own the multi-cloud network foundation: VPC design, routing, transit hubs, IPAM and IPv6, and multi-region failover across GCP, AWS, and Azure, managed as code with Terraform and Crossplane.
• Build hybrid and on-prem connectivity: IPsec VPN, BGP, Cloud Interconnect / Direct Connect / ExpressRoute, and traffic engineering for data centers, regional hubs, and remote offices.
• Design the Kubernetes networking layer: CNI (Cilium, eBPF), ingress via Gateway API and Envoy, Istio (or equivalent) service mesh, and mTLS.
• Run the edge: Load balancing, DNS, WAF, DDoS mitigation, and rate limiting.
• Secure the network by default: Firewalls, segmentation, zero-trust access, and encryption in transit. Partner with Security on policy-as-code that meets HIPAA and SOC 2.
• Own network observability: Flow logs, packet capture, and eBPF visibility (Hubble), wired into OpenTelemetry, Prometheus, and Grafana.
• Treat the network as code: GitOps with Argo CD, pre-merge validation, and self-serve modules for product teams.
• Debug the hard problems: TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking.

What You Have

• 6+ years of experience in cloud native networking or infrastructure engineering
• Deep expertise in network fundamentals: TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking
• Experience with public cloud networking (GCP, AWS, Azure)
• Experience with Kubernetes and cloud-native networking (CNI, eBPF, Gateway API, Envoy, Istio)
• Experience with Infrastructure-as-Code (Terraform, Pulumi)
• Experience designing and operating VPN and site-to-site connectivity at scale
• Experience with BGP route filtering, multi-path routing, and traffic engineering
• Experience with network security: firewalls, WAF, DDoS mitigation, segmentation, and zero-trust
• Experience with network observability and performance troubleshooting (flow logs, packet analysis, latency, packet loss)

Preferred Qualifications

• Experience with Cloud Interconnect (Dedicated Interconnect, Direct Connect, ExpressRoute)
• Experience with kernel network tuning and BGP route optimization
• Experience running DNS infrastructure at scale
• Experience with on-prem or hybrid environments and data center networking
• Contributions to CNCF networking projects (Cilium, Envoy, Istio)
• Experience with network automation and testing (GitOps, Batfish, containerlab)
• Experience in regulated industries with HIPAA, SOC 2, or PCI obligations