Senior/Staff Network Infrastructure Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, construct, validate, and manage public and private networks across fal’s public platform and private computing clusters.

• Automate and expedite network provisioning, configuration, validation, monitoring, and recovery utilizing AI technologies.

• Oversee ASNs, public IP ranges, and private address allocations.

• Develop and maintain BGP routing, which includes route policies, communities, filtering, traffic engineering, and failover strategies.

• Announce IP ranges for customers and the company from both physical infrastructure and cloud service providers, including BYOIP integrations.

• Establish private peering connections with customers, partners, data centers, internet exchanges, and cloud service providers.

• Create private and overlay networks leveraging VXLAN, IPsec, WireGuard, and Tailscale technologies.

• Manage DNS networking strategies, including anycast DNS and mDNS.

• Optimize the Linux networking stack for enhanced throughput, minimal latency, and substantial connection counts.

• Construct network observability and diagnostic systems utilizing metrics, logs, flow data, active probes, and packet captures.

• Develop reusable tools, standards, documentation, and runbooks.

• Collaborate with customers and internal teams to convert connectivity, security, isolation, and performance requirements into effective network designs.

⛳️ Requirements

• A minimum of 5 years' experience in building and operating production network infrastructure.

• Proficient in Linux networking: routing tables, policy routing, network namespaces, bonding, VLANs, bridges, firewalling, NAT, and conntrack.

• Extensive knowledge of BGP principles: route selection, communities, filtering, convergence, multipath, and troubleshooting techniques.

• Experience in managing ASNs, public IP allocations, BGP announcements, IPAM, RPKI/ROAs, and IRR records.

• Skilled in designing private IPv4/IPv6 address plans and preventing conflicts across customers and regions.

• Demonstrated experience with production VXLAN overlay networks.

• Practical experience with IPsec, WireGuard, or Tailscale in production environments.

• Familiarity with anycast DNS and mDNS technologies.

• Experience in private peering and interconnects with cloud service providers.

• Expertise in Linux networking performance tuning, including congestion control, queue disciplines, socket buffers, MTU, NIC offloads, RSS/RPS/XPS, and IRQ affinity.

• Proficient in packet-level troubleshooting using tools such as iproute2, tc, ethtool, tcpdump, Wireshark, and mtr.

• Experience with Ansible or equivalent network configuration automation tools.

• Applicants must provide United States work authorization and visa sponsorship status in the application form.

🏝️ Benefits

• Equity offered.

• Remote work arrangement.