Senior Software Engineer (Gateway & Networking Infrastructure)

Coreweave; New York (NY); On-site; USD 140,000 - 230,000; Full time

Job summary

CoreWeave is seeking a Senior Engineer for the Cloud Platform API team to design and operate gateways that front the control plane. You will drive migrations (e.g., HAProxy to Envoy), own routing, TLS/mTLS, rate limiting, and observability, and set engineering standards across the gateway stack.

Mentoring and cross-team collaboration are core parts of the role. You will contribute to a high-availability, low-latency platform that powers customer requests from CLI, console, and Terraform, across

Qualifications

• Production experience writing Go.
• Strong grounding in TLS/mTLS and edge and authentication concerns.
• Experience with running a fleet of proxies across many clusters and zones.
• Track record of setting technical direction and leading initiatives across teams.
• Deep Kubernetes experience, Gateway API or Ingress, operators and controllers.

Responsibilities

• Own the API and Kubernetes Gateways API stacks and their CRDs: routing, TLS/mTLS, rate limiting, observability.
• Drive large-scale infrastructure migrations across zones with minimal customer impact.
• Manage networking and traffic at scale: L4/L7, load balancing, global routing, failover.
• Mentor senior and mid-level engineers and liaise across teams and leadership.

Skills

Go programming

TLS/mTLS

Kubernetes Gateway API

Envoy

NGINX/HAProxy

Observability

Reliability engineering

Cross-team collaboration

Leadership / mentoring

Tools

Envoy

Vault

Kubernetes

NGINX

HAProxy

Job description

• The Cloud Platform API team builds the platform and infrastructure that front CoreWeave’s control plane. This role sits with the group that owns the API Gateway (the single secure front door for control-plane traffic) and the Kubernetes Gateway, one secure endpoint into every CoreWeave Kubernetes Service (CKS) cluster control plane, public or private. The team runs the Envoy and Kubernetes Gateway API stack that carries every customer, CLI, console, and Terraform request. This is high-leverage infrastructure at CoreWeave: the gateway is the choke point, and its latency and availability are what customers perceive as the platform’s
• As a Senior Engineer on the Cloud Platform API team, you’ll design and operate the gateways that front the entire control plane. You’ll drive large-scale networking migrations, such as moving from NGINX/HAProxy to Envoy across every zone with no customer-visible regression, and own routing, TLS/mTLS, rate limiting, and observability across the stack. You’ll set technical direction for how the team runs its infrastructure, anticipate problems before they turn into incidents, and help stand up new customer-facing features for this infra. You’ll also mentor other engineers, lead post-mortems, and act as a trusted advisor across teams like CKS, VPC, IAM, Cloud Console, and more. This role sits on a technical-leadership track, and we especially welcome engineers interested in eventually leading or managing a team
• Own the API and Kubernetes Gateways API stacks and their CRDs: routing, TLS/mTLS, rate limiting, and observability
• Drive large-scale infrastructure migrations (for example, HAProxy → Envoy) across every zone with one audit-log shape and no customer-visible regression
• Manage networking and traffic at scale: L4/L7 proxying, load balancing, global routing, live failover to healthy backends, encrypted transport, and performance tuning
• Set technical direction across the gateway stack and define the engineering standards the team follows
• Mentor senior and mid-level engineers, lead post-mortems, and act as a bridge across teams and to leadership
• We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren’t a 100% skill or experience match. Here are a few qualities we’ve found compatible with our team. If some of this describes you, we’d love to talk

Production experience writing GoA strong grounding in TLS/mTLS and edge and authentication concerns, plus performance tuning of network-facing servicesYou’re curious about how to run a fleet of proxies safely across many clusters and zonesA track record of setting technical direction and leading initiatives across teamsYou have strong instincts for reliability, blast-radius thinking, and operational rigorClear communication about your technical contributions and cross-team collaborationDeep Kubernetes experience, ideally with the Gateway API or Ingress, operators and controllers, and running multiple clusters and the applications deployed across themDeep experience with networking and traffic infrastructure: L4/L7 load balancing, reverse proxies (Envoy, HAProxy, or NGINX), or API gatewaysYou love owning infrastructure that everything else depends onExperience with certificate issuance and rotation (for example, via Vault) and with multi-zone or federated control planesInterest in a technical-leadership or engineering-management pathExperience operating a high-traffic edge or gateway as a production choke point: monitoring, runbooks, and incident responseExperience leading a large-scale infrastructure migration end to end10+ years of experience building and operating backend systems