Staff Engineer - Software Development (Cloud Networking & Network Security)

About the role

WHO WE ARE:

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai

About the Role – Staff Engineer, Cloud Networking & Network Security

We are seeking a Staff Engineer – Cloud Networking & Network Security to design, build, and evolve cloud-native networking and security capabilities across multi-cloud environments. This role is intended for a strong hands-on networking engineer with deep experience in routing, NAT, traffic forwarding, and firewall data planes. You will work on complex, production-grade networking systems and contribute to architecture and design decisions within your domain, while partnering closely with senior engineers and architects.

You will be responsible for delivering robust networking functionality—from detailed design and implementation through production rollout, scale, and operational maturity.

Key Responsibilities

Networking Design & Implementation

- Design and implement networking components for cloud networking and security products, spanning both control plane and data plane.

- Contribute to architectural designs for routing, NAT, traffic steering, and firewall enforcement within defined product areas.

- Own medium-to-large technical problem areas and drive them from design through production.

Cloud Networking Platforms

- Design and work with cloud networking topologies, including:

- VPC/VNet segmentation and routing architectures

- Hub-and-spoke and transit networking models

- Hybrid and multi-cloud connectivity patterns

- Work hands-on with cloud-native networking constructs such as:

- Gateways, routing tables, NAT gateways

- Managed and custom firewall services

- Ensure implementations align with security best practices and zero-trust principles.

Routing, NAT & Traffic Engineering

- Design and implement routing-centric features, including:

- Dynamic routing using BGP

- Policy-based routing and traffic steering

- Route summarization, convergence, and failure handling

- Implement and scale NAT functionality, including:

- SNAT, DNAT, and bidirectional NAT

- Centralized vs distributed NAT designs

- Capacity planning, port exhaustion handling, and resiliency

- Develop a strong understanding of packet-level behavior across gateways, firewalls, and load balancers.

Firewall & Data-Plane Systems