Staff Engineer - Software Development
Who We Are
For enterprises struggling to secure cloud workloads, Aviatrix® offers a single solution for pervasive cloud security. Where current cybersecurity approaches focus on securing entry points to a trusted space, Aviatrix Cloud Native Security Fabric (CNSF) delivers runtime security and enforcement within the cloud application infrastructure itself – closing gaps between existing solutions and helping organizations regain visibility and control. Aviatrix ensures security, cloud, and networking teams are empowering developer velocity, AI, serverless, and what’s next. For more information, visit www.aviatrix.com
Overview
We are seeking a Staff Engineer – Cloud Networking & Network Security to design and build scalable, cloud-native networking and security systems across multi-cloud environments.
This role is ideal for a hands-on networking expert with strong experience in routing-centric, NAT-heavy, data-plane–intensive systems. You will lead the design and implementation of key networking components, drive technical decisions within your domain, and collaborate across engineering teams to deliver high-performance cloud networking products.
You will play a critical role in solving complex networking challenges spanning routing, NAT, traffic steering, firewall enforcement, and telemetry at cloud scale.
Key Responsibilities
Networking Architecture & Design
· Lead the design and implementation of major networking components across control plane and data plane.
· Contribute to architectural decisions for routing, NAT, traffic steering, and firewall enforcement.
· Own technical design documents and drive design reviews within your domain.
· Ensure networking correctness, resiliency, scalability, and operability in production environments.
Cloud Networking Platforms
· Design and implement cloud networking topologies including:
o VPC/VNet segmentation strategies
o Hub-and-spoke and mesh architectures
o Multi-cloud and hybrid connectivity models
· Work hands-on with cloud-native constructs such as:
o Cloud gateways and routing tables
o NAT gateways
o Managed and custom firewall services
· Ensure solutions align with security best practices and zero-trust principles.
Routing, NAT & Traffic Engineering
· Implement and optimize routing designs including:
o BGP-based dynamic route exchange
o Policy-based routing and traffic steering
o ECMP, failover, and convergence improvements
· Design and scale NAT systems, including:
o SNAT/DNAT implementations
o Centralized vs distributed NAT tradeoffs
o Capacity planning, port allocation strategies, and resiliency mechanisms
· Analyze packet flows across gateways, firewalls, and load balancers to ensure correct behavior in complex traffic scenarios.
Execution & Technical Leadership
· Own delivery of significant features from design through production rollout.
· Drive technical design reviews focused on networking correctness and performance.
· Mentor junior and mid-level engineers on advanced networking concepts.
· Collaborate closely with product management, SRE, and operations teams.
· Improve engineering standards, testing strategies, and observability for networking systems.
Required Skills & Experience
· Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Networking, or related field.
· 8–12 years of experience building networking-intensive systems or products.
· Strong experience designing and implementing cloud networking or network security systems.
· Deep understanding of IP networking fundamentals:
o TCP/IP, ARP, ICMP
o Subnetting, CIDR planning, and address management
· Strong expertise in routing:
o BGP fundamentals and policy control
o Static vs dynamic routing
o ECMP, failover, and convergence behavior
· Hands-on experience with NAT:
o SNAT/DNAT behavior and edge cases
o NAT scaling considerations and performance tradeoffs
o NAT interactions with routing and firewall enforcement
· Experience with firewall and network security technologies:
o Policy engines and rule evaluation
o Stateful vs stateless firewalls
o NGFW and cloud-native firewalls
· Proficiency in Python and/or Go for building networking control-plane or management services.
· Solid understanding of distributed systems concepts applied to networking.
· Experience with Kubernetes networking, CNI models, and service networking.
· Familiarity with AWS, Azure, GCP, and/or OCI networking stacks.
· Understanding of zero-trust networking principles and security best practices.
Nice to Have
· Experience with virtual routers, SDN controllers, or network operating systems.
· Exposure to high-performance packet processing technologies (eBPF, DPDK, XDP).
· Experience working on multi-region or large-scale cloud networking systems.
· Contributions to open-source networking projects.
· Certifications such as CCNP/CCIE, AWS Advanced Networking, GCP Professional Cloud Network Engineer, or equivalent.
BENEFITS
US: We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long-term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy.
Outside the US: We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long-term disability, annual wellbeing stipend
Your total compensation package will be based on job-related knowledge, education, certifications and location, per our aligned ranges.
About Aviatrix
Aviatrix® is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Aviatrix Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. Aviatrix is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the Aviatrix Certified Engineer (ACE) Program, the industry’s leading secure multicloud networking certification, Aviatrix unifies cloud, networking, and security teams and unlocks greater potential across any cloud.
WE WANT TO INCLUDE YOU
We embrace the fact that not everyone’s journey took the same route or started at the same place. If your experience doesn’t quite meet the requirements but the opportunity excites you and you believe you could be great, don’t let that hold you back from applying. Tell us what you CAN bring and what makes you special.
Aviatrix is a community where everyone's career can grow and we want to help you achieve your goals and be “your best YOU,” however that looks. If you're seeking an opportunity where you can be excited to start work every morning with enthusiastic people, make a real difference and be part of something amazing then let’s talk. We want to get to know you and how we could grow together.
Aviatrix, Inc. is an equal opportunity employer and does not make hiring decisions based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
CPRA - California Applicant Privacy Notice
