WHO WE ARE

Aviatrix® is pioneering the Cloud Native Security Fabric — the architecture the Containment Era requires. The Cloud Native Security Fabric governs every workload communication path across every cloud, every VPC, every Kubernetes cluster, and every serverless function, from a single policy plane. One rule. Universal propagation. Enforced at the workload, not at a chokepoint. Trusted by more than 500 of the world's leading enterprises. For more information, visit aviatrix.ai

ABOUT THE ROLE: Principal Engineer – Cloud Networking & Network Security

As a Principal Engineer, you will architect large-scale, cloud-native networking and security platforms that operate across multi-cloud and hybrid environments. You will be the senior technical authority for complex routing, NAT, firewall, and data-plane systems, guiding them from early design through production rollout and scale. This role combines deep technical leadership with end-to-end product ownership, direct influence with key customers, and the opportunity to mentor the next generation of cloud networking engineers.

KEY RESPONSIBILITIES

• Oversee a significant component of the cloud networking platform, the cloud networking and security platform, defining control-plane and data-plane standards for routing, NAT, traffic steering, and firewall enforcement at cloud scale.

• Architect multi-cloud and hybrid networking topologies, including VPC/VNet segmentation and hub-and-spoke and mesh designs, aligned with zero-trust security principles.

• Lead the design of routing-centric systems and next-generation firewall data planes, including BGP route exchange, policy-based routing, and large-scale NAT, ensuring correct behaviour across asymmetric routing, NAT traversal, and multi-path traffic.

• Drive delivery from concept through production by writing design docs for ambiguous, cross-component problems and leading design reviews focused on correctness, performance, and scalability.

• Regularly lead cross-team projects where decisions directly affect major organizational objectives. Identify and drive improvements to reliability, performance, and security as the senior technical authority for complex networking issues, including participation in the on-call rotation.

• Serve as the prime technical contact for customers and senior external stakeholders' and 'frequently interview engineering candidates

• Direct the work of other, Mentor engineers on advanced networking, packet flows, and troubleshooting, support interviewing and recruiting, and serve as a trusted technical partner to key customers and senior external stakeholders.

• Contribute to product reliability and availability beyond your own component' and 'Sponsor and build relationships with a few top customers.

• Work independently with considerable latitude to set technical objectives and break down work for the team; results are evaluated over a long-term horizon.

REQUIREMENTS / QUALIFICATIONS

• Bachelor's degree in Computer Science, Electrical Engineering, Networking, or a related field, or equivalent practical experience.

• 10+ years of experience building and shipping networking-intensive products with demonstrated end-to-end product ownership.

• Proven experience architecting cloud networking and network security platforms at scale across multiple cloud providers.

• Expert-level understanding of IP networking fundamentals, including TCP/IP, ARP, ICMP, subnetting, CIDR planning, and address management.

• Deep expertise in BGP, including design, policy control, route advertisement, convergence, ECMP, and troubleshooting.

• Strong hands-on experience with SNAT/DNAT, large-scale NAT capacity planning, port exhaustion handling, and NAT interactions with routing and firewalls.

• Extensive experience with network security technologies, including policy engines, stateful and stateless firewalls, NGFW, IDS/IPS, and cloud-native firewalls.

• Proficiency in Python and/or Go for building networking control-plane and management services, with a solid grasp of distributed systems concepts.