Senior Software Engineer (Gateway & Networking Infrastructure)
Posted
Summary
Senior Software Engineer on the Cloud Platform API team owning the API Gateway and Kubernetes Gateway (Envoy, Gateway API) that front CoreWeave's control plane. Day-to-day: design/operate high-scale gateways, drive migrations (HAProxy→Envoy), manage TLS/mTLS, routing, rate limiting, observability, set technical direction, mentor engineers, and collaborate across CKS, VPC, IAM, and Console teams.
- The Cloud Platform API team builds the platform and infrastructure that front CoreWeave’s control plane. This role sits with the group that owns the API Gateway (the single secure front door for control-plane traffic) and the Kubernetes Gateway, one secure endpoint into every CoreWeave Kubernetes Service (CKS) cluster control plane, public or private. The team runs the Envoy and Kubernetes Gateway API stack that carries every customer, CLI, console, and Terraform request. This is high-leverage infrastructure at CoreWeave: the gateway is the choke point, and its latency and availability are what customers perceive as the platform’s
- As a Senior Engineer on the Cloud Platform API team, you’ll design and operate the gateways that front the entire control plane. You’ll drive large-scale networking migrations, such as moving from NGINX/HAProxy to Envoy across every zone with no customer-visible regression, and own routing, TLS/mTLS, rate limiting, and observability across the stack. You’ll set technical direction for how the team runs its infrastructure, anticipate problems before they turn into incidents, and help stand up new customer-facing features for this infra. You’ll also mentor other engineers, lead post-mortems, and act as a trusted advisor across teams like CKS, VPC, IAM, Cloud Console, and more. This role sits on a technical-leadership track, and we especially welcome engineers interested in eventually leading or managing a team
- Own the API and Kubernetes Gateways API stacks and their CRDs: routing, TLS/mTLS, rate limiting, and observability
- Drive large-scale infrastructure migrations (for example, HAProxy → Envoy) across every zone with one audit-log shape and no customer-visible regression
- Manage networking and traffic at scale: L4/L7 proxying, load balancing, global routing, live failover to healthy backends, encrypted transport, and performance tuning
- Set technical direction across the gateway stack and define the engineering standards the team follows
- Mentor senior and mid-level engineers, lead post-mortems, and act as a bridge across teams and to leadership
- We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren’t a 100% skill or experience match. Here are a few qualities we’ve found compatible with our team. If some of this describes you, we’d love to talk
- Production experience writing Go
- A strong grounding in TLS/mTLS and edge and authentication concerns, plus performance tuning of network-facing services
- You’re curious about how to run a fleet of proxies safely across many clusters and zones
- A track record of setting technical direction and leading initiatives across teams
- You have strong instincts for reliability, blast-radius thinking, and operational rigor
- Clear communication about your technical contributions and cross-team collaboration
- Deep Kubernetes experience, ideally with the Gateway API or Ingress, operators and controllers, and running multiple clusters and the applications deployed across them
- Deep experience with networking and traffic infrastructure: L4/L7 load balancing, reverse proxies (Envoy, HAProxy, or NGINX), or API gateways
- You love owning infrastructure that everything else depends on
- Experience with certificate issuance and rotation (for example, via Vault) and with multi-zone or federated control planes
- Interest in a technical-leadership or engineering-management path
- Experience operating a high-traffic edge or gateway as a production choke point: monitoring, runbooks, and incident response
- Experience leading a large-scale infrastructure migration end to end
- 10+ years of experience building and operating backend systems