Staff Software Engineer - Cloud Infrastructure and Devops

Engineering At VenmoEngineering in Cloud Platform & InfrastructureOur Cloud Platform & Infrastructure organization builds and operates the foundational services that power Venmo's platform: compute, networking, routing, observability, and developer platform capabilities used by every product team at Venmo. We believe great infrastructure should be invisible to the teams who rely on it; fast, secure, and reliable by default. We partner closely with SRE, security, and product engineering teams to build automated, self-service systems at scale, and we hold ourselves to a high bar for engineering rigor and operational excellence.Job Description: Cloud Network & Routing EngineerOur Cloud Network & Routing team owns the network & routing layers that connect Venmo's applications to the internet and to each other: CDN, proxy, web application firewall and security, ingress and routing, and internal traffic management across our AWS environment.

We work hand-in-hand with the rest of the Cloud Platform & Infrastructure org, including compute, storage, SRE, and security teams, to make sure traffic is fast, secure, and reliable at every hop.As a Staff Software Engineer, you will support this critical domain, leading major initiatives across networking, routing, CDN, and infra security. You will be part of what defines the future of the company's networking and routing strategy. You are a hands-on contributor who teaches by example and mentors other engineers and product teams, driving best practices across the broader Cloud Platform & Infrastructure org.

We have a lot of independence in our decisions, but we are kept accountable for the results.Our technical stack: AWS, AWS CloudFront, CDN, WAF, Envoy, Contour, NGINX, EKS, Docker, CDK, Terraform, GitHub Enterprise, GitHub Actions, Datadog, Bash, Python, Go.As a Staff Engineer, you will:Contribute to and help drive the strategic direction of our cloud network, and routing, leading initiatives across CDN, WAF, proxy, and ingressAct as a hands-on contributor, while leading by exampleMentor senior and junior engineersEnjoy a high degree of independence in decision-making while being accountable for results of yourself and your teamBe part of a team dedicated to driving the scalability, security, and reliability of Venmo's cloud network and edge infrastructureProvide guidance, thought leadership, and mentorship to teams across the Cloud Platform & Infrastructure org to build and strengthen their networking and edge competenciesWhat You'll DoLead major initiatives end-to-end across cloud networking, routing, CDN, and infra security: define the design, identify stakeholders, navigate risks and changes, coordinate colleagues' work, implement solutions, and be accountable for timely, quality deliveryArchitect and evolve our CDN and edge delivery strategy (AWS CloudFront) for performance, availability, and cost efficiency at scaleSet direction for WAF and edge security controls, protecting Venmo's services from DDoS, bot, and application-layer threatsOwn the architecture of our Envoy- and Contour-based ingress, and our nginx-based reverse proxy and load-balancing servicesContinually raise the bar by helping fellow engineers develop and deliver networking and edge solutions more efficiently and securelyTroubleshoot complex network incidents, identify root causes, and implement preventive measuresCoach and mentor engineers across the Cloud Platform & Infrastructure org on networking design principles and best practicesRecognize, validate, and evangelize emerging networking and edge technologies and architectures that align with business objectivesDevelop and improve infrastructure-as-code and automation to manage networking and routing configurationEnhance the quality, reliability, and security of our network and edge infrastructure and operationsWhat We're Looking ForBachelor's and/or master's in computer science or related field of study7+ years' experience in software development or a related field5+ years' experience operating distributed cloud network, routing, or edge infrastructure 24x7x365, as part of a Cloud Engineering, Network Engineering, DevOps, and/or SRE team2+ years technical leadership experienceDeep hands-on experience designing, implementing, and supporting cloud networking and edge infrastructure (AWS preferred) at global scaleDeep expertise with CDN and edge delivery (AWS CloudFront or similar), WAF, and edge securityDeep hands-on experience with Envoy, Contour, or similar service mesh / ingress controller technologiesDeep hands-on experience with nginx or similar reverse proxy and load-balancing technologiesExpert understanding of networking fundamentals: TCP/IP, DNS, TLS/SSL, BGP/routing protocols, and load balancing algorithmsHands-on programming and scripting (Python, Go, Bash)Hands-on experience with containers and container orchestration (Docker, Kubernetes)Strong communication skills with the ability to understand and explain technical issues to a non-technical audience