Infrastrucuture Engineer, Traffic

Whatnot; San Francisco (CA); On-site; USD 207,000 - 230,000; Full time

Benefits offered by this job

Holiday policy

Health insurance

WFH support

Home office allowance

Cell phone allowance

Internet allowance

Wellness allowance

Childcare allowance

Family planning

401k match

Dogfooding budget

Parental leave

Job summary

Whatnot is hiring an Infrastructure Engineer to own the critical path between customers and code, spanning edge, DNS, private connectivity, service mesh, TLS, and internal access. You will partner with Reliability and Platform Engineering to instrument all layers of a request and deliver fast, secure network paths.

You will design scalable private networks, push the mesh forward, and automate critical infrastructure to keep engineers focused on product.

Qualifications

• Bachelor's degree in Computer Science or related field
• 7+ years of professional software engineering experience, preferably behind high-traffic apps.
• Deep hands-on experience with Istio and Envoy (3+ years) and custom Envoy extensions.

Responsibilities

• Own the path between Whatnot's customers and our code across edge, DNS, connectivity, service mesh, TLS, and internal access.
• Instrument every layer of a request and surface signals for observability and debugging.
• Build scalable private connectivity between services, accounts, and clusters; maintain security as topology grows.
• Advance the service proxy and mesh layer, tuning for real traffic patterns and extending when needed.
• Make network debugging easy by ensuring robust instrumentation and fast, evidence-based answers.
• Design for failure and rehearse failover to minimize blast radius before incidents occur.

Skills

Software engineering

Istio & Envoy

Envoy extensions

Kubernetes networking

Cloudflare CDN

Latency optimization

DNS/TLS/Routing

AWS networking

VPC topology

Network debugging

Education

Bachelor's degree in CS or related field

Tools

Cloudflare

Job description

Join the Future of Commerce with Whatnot!

Whatnot is the largest live shopping platform in North America and Europe to buy, sell, and discover the things you love. Whether it's trading cards, fashion, electronics, or live plants, our sellers are building real businesses across hundreds of categories. We're building live commerce at a scale that's never been done in the West, and there's no playbook to copy. The people here are shaping how an entirely new industry develops.

As a remote co-located team, we're inspired by our values and anchored in hubs across the US, UK, Ireland, Poland, Germany, and Australia. We move fast, stay close to our users, and focus on the work that drives the most impact.

We're one of the fastest growing marketplaces and were recently named the #1 Best Startup Employer in America by Forbes. Check out the latest Whatnot updates on our news and engineering blogs and join us as we enable anyone to turn their passion into a business and bring people together through commerce.

Role

We're looking for an Infrastructure Engineer to own the path between Whatnot's customers and our code. The Traffic team owns every hop along that path: the edge, DNS, private connectivity, the service mesh, TLS, and internal access. We make it fast, reliable, and secure by default, so product engineers ship globally without thinking about the network.

You'll partner closely with Reliability and Platform Engineering to get observability right. Network problems are only debuggable if the data already exists when the incident starts, so you'll work with those teams to instrument every layer of a request, land those signals in the tooling engineers already use, and make \"is it the network?\" a question answered with evidence in minutes instead of debated for hours. You'll work with Security just as closely on how traffic enters, leaves, and moves inside our perimeter.

This is a hands-on, software-first role rather than a network administration one. You'll write controllers, extensions, and automation, and the bar for success is that other engineers stop needing to think about the layer you own.

Our surface area covers the full journey of a request, and you will work across most of it:

• Shape how traffic reaches us at the edge, from caching and security posture to the routing decisions that determine how fast Whatnot feels in each part of the world


• Build and scale the private connectivity that carries traffic between our services, accounts, and clusters, and keep it secure as the topology grows


• Push our service proxy and mesh layer further, tuning it for the traffic patterns we actually have and extending it when the off-the-shelf configuration stops being enough


• Keep name resolution, TLS, and internal access boring, and automated, to the engineers who depend on them


• Make the network legible. Every layer of a request should be instrumented well enough that \"is it the network?\" gets answered with evidence in minutes instead of debated for hours


• Design for the failure cases first. Network changes carry enormous blast radius, so you will build tooling that makes correct changes easy and dangerous ones hard, and rehearse failover before we need it

We offer flexibility to work from home or from one of our global office hubs, and we value in-person time for planning, problem-solving, and connection. Team members in this role must live within commuting distance of our Seattle or San Francisco hub.

You

• Bachelor’s degree in Computer Science, a related field, or equivalent practical experience.


• 7+ years of professional software engineering experience preferably running the network behind high‑traffic applications.


• Have deep, hands‑on experience (3+ years) with Istio and Envoy. You know the components and configuration surface intimately and have tuned them successfully for very different use cases


• Have written custom Envoy extensions when configuration alone wasn't enough


• Know Kubernetes networking deeply, from CNI behavior and pod and service networking to ingress and how traffic actually moves inside and between clusters


• Have operated a CDN at scale, preferably Cloudflare


• Have run globally distributed applications and understand what differs when your users and your infrastructure sit in different regions


• Have owned latency‑sensitive systems and can reason precisely about where milliseconds come from and go


• Have strong networking fundamentals across DNS, TLS, TCP, and routing, plus genuine curiosity about the layers beneath the application


• Know modern cloud provider networking deeply, AWS in particular. You have designed VPC topology at scale and understand the tradeoffs between Transit Gateway, PrivateLink, peering, and NAT well enough to pick the right one and defend it


• Debug across boundaries. You are comfortable with packet captures, proxy logs, and traces, and you answer \"is it the network?\" with data

Benefits

• Generous Holiday and Time off Policy


• Health Insurance options including Medical, Dental, Vision


• Work From Home Support
  
  
  
  • Home office setup allowance
  
  
  • Monthly allowance for cell phone and internet
  
  
  
  


• Care benefits
  
  
  
  • Monthly allowance for wellness
  
  
  • Annual allowance towards Childcare
  
  
  • Lifetime benefit for family planning, such as adoption or fertility expenses
  
  
  
  


• Retirement; 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally


• Monthly allowance to dogfood the app
  
  
  
  • All Whatnauts are expected to develop a deep understanding of our product. We're passionate about building the best user experience, and all employees are expected to use Whatnot as both a buyer and a seller as part of their job (our dogfooding budget makes this fun and easy!).
  
  
  
  


• Parental Leave
  
  
  
  • 16 weeks of paid parental leave + one month gradual return to work *company leave allowances run concurrently with country leave requirements which take precedence.
  
  
  
  

EOE

Whatnot is proud to be an Equal Opportunity Employer. We value diversity, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, parental status, disability status, or any other status protected by local law. We believe that our work is better and our company culture is improved when we encourage, support, and respect the different skills and experiences represented within our workforce.

Compensation Range: $207K - $230K