Staff Engineer - Software Development (Cloud Networking & Network Security)

About this role

<div class="content-intro"><div> </div> <div><br></div></div><p>WHO WE ARE:  </p> <p>Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit <a href="http://aviatrix.ai">aviatrix.ai</a></p> <p>About the Role – Staff Engineer, Cloud Networking & Network Security</p> <p>We are seeking a Staff Engineer – Cloud Networking & Network Security to design, build, and evolve cloud-native networking and security capabilities across multi-cloud environments. This role is intended for a strong hands-on networking engineer with deep experience in routing, NAT, traffic forwarding, and firewall data planes. You will work on complex, production-grade networking systems and contribute to architecture and design decisions within your domain, while partnering closely with senior engineers and architects.</p> <p>You will be responsible for delivering robust networking functionality—from detailed design and implementation through production rollout, scale, and operational maturity.</p> <p>Key Responsibilities</p> <p>Networking Design & Implementation</p> <ul> <li>Design and implement networking components for cloud networking and security products, spanning both control plane and data plane.</li> <li>Contribute to architectural designs for routing, NAT, traffic steering, and firewall enforcement within defined product areas.</li> <li>Own medium-to-large technical problem areas and drive them from design through production.</li> </ul> <p>Cloud Networking Platforms</p> <ul> <li>Design and work with cloud networking topologies, including:</li> <ul> <li>VPC/VNet segmentation and routing architectures</li> <li>Hub-and-spoke and transit networking models</li> <li>Hybrid and multi-cloud connectivity patterns</li> </ul> <li>Work hands-on with cloud-native networking constructs such as:</li> <ul> <li>Gateways, routing tables, NAT gateways</li> <li>Managed and custom firewall services</li> </ul> <li>Ensure implementations align with security best practices and zero-trust principles.</li> </ul> <p>Routing, NAT & Traffic Engineering</p> <ul> <li>Design and implement routing-centric features, including:</li> <ul> <li>Dynamic routing using BGP</li> <li>Policy-based routing and traffic steering</li> <li>Route summarization, convergence, and failure handling</li> </ul> <li>Implement and scale NAT functionality, including:</li> <ul> <li>SNAT, DNAT, and bidirectional NAT</li> <li>Centralized vs distributed NAT designs</li> <li>Capacity planning, port exhaustion handling, and resiliency</li> </ul> <li>Develop a strong understanding of packet-level behavior across gateways, firewalls, and load balancers.</li> </ul> <p>Firewall & Data-Plane Systems</p> <ul> <li>Contribute to the design and implementation of firewall data planes, including:</li> <ul> <li>Policy evaluation and enforcement pipelines</li> <li>Stateful vs stateless inspection models</li> </ul> <li>Work on performance-sensitive packet processing paths with a focus on correctness and scalability.</li> <li>Debug complex scenarios involving asymmetric routing, NAT traversal, and multi-path traffic.</li> </ul> <p>Execution & Collaboration</p> <ul> <li>Deliver features from design to production with a strong focus on quality, scalability, and operability.</li> <li>Participate actively in technical design reviews, providing feedback on networking correctness and performance.</li> <li>Collaborate closely with product management, QA, and operations teams to deliver reliable, shippable solutions.</li> <li>Mentor junior engineers on networking fundamentals, packet flows, and troubleshooting techniques.</li> </ul> <p>Required Skills & Experience</p> <ul> <li>Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Networking, or a related field.</li> <li>6+ years of experience building networking-intensive systems or cloud networking features.</li> <li>Hands-on experience developing or operating cloud networking or network security products.</li> <li>Strong understanding of IP networking fundamentals, including:</li> <ul> <li>TCP/IP, ARP, ICMP</li> <li>Subnetting, CIDR planning, and IP address management</li> </ul> <li>Solid experience with routing, including:</li> <ul> <li>BGP fundamentals (design, policy control, troubleshooting)</li> <li>Static vs dynamic routing models</li> <li>ECMP and failover concepts</li> </ul> <li>Strong hands-on experience with NAT, including:</li> <ul> <li>SNAT and DNAT behavior</li> <li>Common corner cases and failure scenarios</li> <li>Interaction of NAT with routing and firewalls</li> </ul> <li>Experience working with firewall and network security technologies, such…