We're hiring a Senior Software Engineer on the Network Infrastructure team to own the networking backbone of our multi-cloud, application, and corporate infrastructure that every other engineering team at Commure relies on. This is a horizontal team supporting multi-product infrastructure, and the network layer is yours to design, build, and operate end-to-end:
Multi-cloud network foundation and IaC
Hybrid and on-prem connectivity
Kubernetes and service networking
Edge, load balancing, and DNS
Network security and zero-trust access
Network observability
Network automation using GitOps
The stack today runs on public cloud (GCP, AWS, and Azure), with all infrastructure defined as code (Terraform and controller-based). Argo CD drives deployment; Helm handles application packaging; Prometheus, Grafana, and OpenTelemetry power observability. Networking is an active build-out toward cloud-native patterns (Kubernetes-native networking, eBPF, Gateway API, service mesh), and the shape of it is yours to define.
This is a hands-on IC role with broad scope. You'll make architectural calls, write the code that matters most, and set the patterns other teams build on.
WHAT YOU'LL DO
You'll own several of these verticals within the team's scope end-to-end.
Own the multi-cloud network foundation: VPC design, routing, transit hubs, IPAM and IPv6, and multi-region failover across GCP, AWS, and Azure. Managed as code with Terraform and Crossplane
Build hybrid and on-prem connectivity: IPsec VPN, BGP, Cloud Interconnect / Direct Connect / ExpressRoute, and traffic engineering for data centers, regional hubs, and remote offices
Design the Kubernetes networking layer: CNI (Cilium, eBPF), ingress via Gateway API and Envoy, Istio (or equivalent) service mesh, and mTLS
Run the edge: load balancing, DNS, WAF, DDoS mitigation, and rate limiting
Secure the network by default: firewalls, segmentation, zero-trust access, and encryption in transit. Partner with Security on policy-as-code that meets HIPAA and SOC 2
Own network observability: flow logs, packet capture, and eBPF visibility (Hubble), wired into OpenTelemetry, Prometheus, and Grafana
Treat the network as code: GitOps with Argo CD, pre-merge validation, and self-serve modules for product teams
Debug the hard problems: TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking
WHAT YOU HAVE
6+ years of experience in cloud native networking or infrastructure engineering
Deep expertise in network fundamentals: TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking
Experience with public cloud networking (GCP, AWS, Azure)
Experience with Kubernetes and cloud-native networking (CNI, eBPF, Gateway API, Envoy, Istio)
Experience with Infrastructure-as-Code (Terraform, Pulumi)
Experience designing and operating VPN and site-to-site connectivity at scale
Experience with BGP route filtering, multi-path routing, and traffic engineering
Experience with network security: firewalls, WAF, DDoS mitigation, segmentation, and zero-trust
Experience with network observability and performance troubleshooting (flow logs, packet analysis, latency, packet loss)
PREFERRED
Experience with Cloud Interconnect (Dedicated Interconnect, Direct Connect, ExpressRoute)
Experience with kernel network tuning and BGP route optimization
Experience running DNS infrastructure at scale
Experience with on-prem or hybrid environments and data center networking
Contributions to CNCF networking projects (Cilium, Envoy, Istio)
Experience with network automation and testing (GitOps, Batfish, containerlab)
Experience in regulated industries with HIPAA, SOC 2, or PCI obligations
You don't need to check every box: strong network fundamentals, cloud native or Kubernetes background matter most.
Please be aware that all official communication from us will come exclusively from email addresses ending in @commure.com http://commure.com. Any emails from other domains are not affiliated with our organization.
Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.
