WHO WE ARE
Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai
ABOUT THE ROLE: Principal Engineer – Cloud Networking & Network Security
As a Principal Engineer, you will architect large-scale, cloud-native networking and security platforms that operate across multi-cloud and hybrid environments. You will be the senior technical authority for complex routing, NAT, firewall, and data-plane systems, guiding them from early design through production rollout and scale. This role combines deep technical leadership with end-to-end product ownership, direct influence with key customers, and the opportunity to mentor the next generation of cloud networking engineers.
KEY RESPONSIBILITIES
• Oversee a significant component of the cloud networking platform, the cloud networking and security platform, defining control-plane and data-plane standards for routing, NAT, traffic steering, and firewall enforcement at cloud scale.
• Architect multi-cloud and hybrid networking topologies, including VPC/VNet segmentation and hub-and-spoke and mesh designs, aligned with zero-trust security principles.
• Lead the design of routing-centric systems and next-generation firewall data planes, including BGP route exchange, policy-based routing, and large-scale NAT, ensuring correct behaviour across asymmetric routing, NAT traversal, and multi-path traffic.
• Drive delivery from concept through production by writing design docs for ambiguous, cross-component problems and leading design reviews focused on correctness, performance, and scalability.
• Regularly lead cross-team projects where decisions directly affect major organizational objectives. Identify and drive improvements to reliability, performance, and security as the senior technical authority for complex networking issues, including participation in the on-call rotation.
• Serve as the prime technical contact for customers and senior external stakeholders' and 'frequently interview engineering candidates
• Direct the work of other, Mentor engineers on advanced networking, packet flows, and troubleshooting, support interviewing and recruiting, and serve as a trusted technical partner to key customers and senior external stakeholders.
• Contribute to product reliability and availability beyond your own component' and 'Sponsor and build relationships with a few top customers.
• Work independently with considerable latitude to set technical objectives and break down work for the team; results are evaluated over a long-term horizon.
REQUIREMENTS / QUALIFICATIONS
• Bachelor's degree in Computer Science, Electrical Engineering, Networking, or a related field, or equivalent practical experience.
• 10+ years of experience building and shipping networking-intensive products with demonstrated end-to-end product ownership.
• Proven experience architecting cloud networking and network security platforms at scale across multiple cloud providers.
• Expert-level understanding of IP networking fundamentals, including TCP/IP, ARP, ICMP, subnetting, CIDR planning, and address management.
• Deep expertise in BGP, including design, policy control, route advertisement, convergence, ECMP, and troubleshooting.
• Strong hands-on experience with SNAT/DNAT, large-scale NAT capacity planning, port exhaustion handling, and NAT interactions with routing and firewalls.
• Extensive experience with network security technologies, including policy engines, stateful and stateless firewalls, NGFW, IDS/IPS, and cloud-native firewalls.
• Proficiency in Python and/or Go for building networking control-plane and management services, with a solid grasp of distributed systems concepts.
NICE TO HAVE
• Experience with high-performance packet processing frameworks such as eBPF, DPDK, or XDP.
• Background in network operating systems, virtual routers, or SDN controllers.
• Contributions to or deep involvement with open-source networking projects.
• Hands-on experience with Kubernetes networking, CNI concepts, and service networking.
• Professional certifications such as CCIE, AWS Advanced Networking, or GCP Professional Cloud Network Engineer
BENEFITS
US: We cover 100% of employee premiums and 88% of dependent(s) premiums for medical, dental and vision coverage, 401(k) match, short and long-term disability, life/AD&D insurance, $1,000/year education reimbursement, and a flexible vacation policy.
Outside the US: We offer a comprehensive benefits package which, (subject to regional variations) could include pension, private medical for you and dependents, generous holiday allowance, life assurance, long-term disability, annual wellbeing stipend
Your total compensation package will be based on job-related knowledge, education, certifications and location, per our aligned ranges.
About Aviatrix
Aviatrix® is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Aviatrix Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. Aviatrix is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the Aviatrix Certified Engineer (ACE) Program, the industry’s leading secure multicloud networking certification, Aviatrix unifies cloud, networking, and security teams and unlocks greater potential across any cloud.
WE WANT TO INCLUDE YOU
We embrace the fact that not everyone’s journey took the same route or started at the same place. If your experience doesn’t quite meet the requirements but the opportunity excites you and you believe you could be great, don’t let that hold you back from applying. Tell us what you CAN bring and what makes you special.
Aviatrix is a community where everyone's career can grow and we want to help you achieve your goals and be “your best YOU,” however that looks. If you're seeking an opportunity where you can be excited to start work every morning with enthusiastic people, make a real difference and be part of something amazing then let’s talk. We want to get to know you and how we could grow together.
Aviatrix, Inc. is an equal opportunity employer and does not make hiring decisions based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
CPRA - California Applicant Privacy Notice
