Senior DevOps Engineer, Networking

Kai; San Jose (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Kai, the AI company rebuilding cybersecurity for the machine-speed era, is seeking a senior network engineer to design, implement, and own production cloud networks for enterprise-scale security.

You’ll manage multi-region infrastructure, enforce zero-trust boundaries, and drive Terraform pipelines to automate provisioning, monitoring, and compliance across AWS/GCP/Azure, San Jose in-office.

Qualifications

• 5+ years of network engineering experience, with at least 3+ years in production cloud environments.
• Designing secure multi-tenant cloud networks with isolation requirements.
• Hands-on experience with IPsec multi-tunnel architectures.
• Experience deploying Palo Alto VM-Series and Panorama in production.
• Exposure to enterprise CDNs (Cloudflare or Akamai) and WAF configuration.
• Strong Terraform usage for provisioning and automating cloud network resources.

Responsibilities

• Design, implement, and maintain highly available, multi-region cloud networks.
• Architect and manage segmentation, VRFs, and zero-trust boundaries across shared infrastructure.
• Engineer and optimize high-scale IPsec VPN topologies and Cloud‑WAN architectures.
• Deploy and tune edge services including CDNs and WAF rulesets.
• Manage Palo Alto VM-Series and Panorama for access control and threat prevention.
• Drive a software-defined approach via Terraform pipelines to eliminate drift.

Skills

Cloud networking

Network security

Terraform

Palo Alto VM-Series

WAF configuration

CDN knowledge

Terraform pipelines

Tools

Terraform

Palo Alto VM-Series

Panorama

Cloudflare CDN

Akamai CDN

WAF configuration

Job description

Kai is the AI company rebuilding cybersecurity for the machine-speed era. Founded by second time founders and trusted by Fortune 500 enterprises, Kai is building a future where security has nocategories, no silos, and nohumanspeed bottlenecks.TheKaiAgentic AI Platformreplaces fragmented, human-limited workflows with agentic AI systems that continuously contextualize, assess, reason,and execute security work at machine speed - making human defenders, superhuman.

Why Join Kai

• Well-funded: With $125M raised, we have the capital, runway, and resolve to rebuild cybersecurity from first principles.
• Proven: We’ve earned the trust of Fortune 500 and Global 1000 companies, and we’re just getting started. Their confidence in Kai reflects what we’ve built: an AI-powered cybersecurity platform that performs at the scale and speed the enterprise demands.
• Experienced founders: Our founding team consists of second-time entrepreneurs, each with over 20 years of experience in the cybersecurity industry. Their proven expertise and vision drive our ambitious goals.
• World-class leadership team: Our Heads of AI, Engineering, and Product bring extensive experience from some of the world’s most influential companies, ensuring top-tier mentorship, direction, and vision.
• Frontier AI Applied Research Team: Our researchers operate at the leading edge of agentic AI systems, translating breakthrough capabilities into real-world cybersecurity applications.
• Generous compensation: We offer highly competitive salaries, equity options, and a supportive work environment. Your contributions will be valued and rewarded as we grow together.

Why This Role Matters

Kai’s customers are Fortune 500 and Global 2000 enterprises with strict security, compliance, and availability requirements. The network infrastructure that underpins our platform must be resilient, multi-tenant, and zero-trust from the ground up. This is not a maintenance role — you are architecting and owning the production cloud network that our customers depend on and that our platform operates across. The work you do here directly affects customer trust, product reliability, and Kai’s ability to scale.

What You’ll Do

• Design, implement, and maintain highly available, resilient multi-region cloud networks capable of supporting strict enterprise SLAs.
• Architect and manage strict logical segmentation, virtual routing (VRFs), and zero-trust boundaries across shared cloud infrastructure to ensure total data isolation between tenants.
• Engineer and optimize high-scale, multi-tunnel IPsec VPN topologies and Cloud‑WAN architectures to interconnect distributed on-premise infrastructure and multi‑cloud environments seamlessly.
• Deploy and tune global edge services — including CDNs and WAF rulesets — to optimize application performance while defending against web vulnerabilities and DDoS attacks.
• Manage next-generation firewalls — specifically Palo Alto Networks VM‑Series and Panorama — to enforce strict access controls, threat prevention, and secure traffic inspection.
• Drive a software‑defined everything approach, provisioning and managing 100% of network infrastructure via Terraform pipelines to eliminate configuration drift.

What We’re Looking For

• 5+ years of dedicated network engineering experience, with at least 3+ years focused on production‑grade cloud environments — AWS, GCP, or Azure.
• Proven track record of designing and operating secure multi‑tenant cloud networks with strict compliance and isolation requirements.
• Deep hands‑on expertise in building, scaling, and troubleshooting complex, high‑density multi‑tunnel IPsec architectures.
• Robust experience deploying and operationalizing Palo Alto Networks firewalls — VM‑Series and Panorama — including centralized policy management.
• Direct experience hardening the cloud perimeter using enterprise CDNs — Cloudflare, Akamai, or equivalent — and advanced WAF configuration.
• High proficiency using Terraform for the continuous delivery and automation of cloud network resources — VPCs, routing tables, gateways, security groups.

Work Location – San Jose, CA (5 days in the office)