Senior Software Engineer, Tactical Networking

Anduril-1; Costa Mesa (CA); On-site; USD 191,000 - 253,000; Full time

Job summary

Anduril Industries in California is seeking a Senior Software Engineer for the Tactical Networking team to design and implement Layer 3 networking across DDIL environments, integrating VPN, dynamic routing, and multi-path failover for radios, satellites, and wired transports.

You will build network management, PKI infrastructure, and zero-trust identity across the mesh, with observability via Prometheus, Grafana, and eBPF, plus hands-on debugging from field assets to cloud.

Qualifications

• 3+ years of professional software engineering experience.
• Proficiency in a systems programming language (Rust, C, C++, or Go).
• Strong understanding of Layer 3 networking: IP routing, tunneling (WireGuard, IPsec), TCP/UDP, socket programming.
• Experience building distributed or networked systems (SDN/SD-WANs, VPNs, routing daemons, network control planes, or similar).
• Understanding of cryptographic fundamentals: symmetric/asymmetric encryption, digital signatures, certificate chains, TLS.
• Experience designing or operating PKI systems (certificate authorities, ACME, EST, or custom issuance protocols).
• Familiarity with asynchronous programming models.
• Comfort with network debugging tools (tcpdump, Wireshark, iproute2).
• Must be eligible to obtain and maintain an active U.S. Secret security clearance.

Responsibilities

• Design and implement Layer 3 networking for DDIL environments — VPN tunnel management, dynamic routing, and multi-path failover across tactical radios, satellite, and wired transports
• Build radio integration layers that abstract diverse tactical waveforms behind a unified networking interface
• Design QoS scheduling and traffic shaping to ensure mission-critical data flows under severe bandwidth constraints
• Build network management and orchestration systems for real-time topology configuration and adaptation
• Architect PKI infrastructure for the Lattice mesh — certificate authorities, automated issuance/renewal, revocation (CRL/OCSP), and secure node bootstrapping
• Design certificate lifecycle management that handles rotation and re-keying across nodes with intermittent connectivity
• Implement zero-trust identity verification across all mesh communication paths
• Treat network observability as a first-class citizen — build Prometheus metrics, Grafana dashboards, eBPF-based instrumentation, and CLI tooling for topology inspection, link health, and certificate status
• Debug complex networking issues from packet captures on deployed assets to cloud infrastructure

Tools

tcpdump

Wireshark

iproute2

Prometheus

Grafana

eBPF

CLI tooling

PKI tooling

Job description

Senior Software Engineer, Tactical Networking

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century's most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril's family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.

ABOUT THE TEAM

The Software Platform organization is seeking a Software Engineer to join Anduril's Tactical Networking Team. We build and operate the Layer 3 networking infrastructure that connects Anduril's autonomous systems and operators across denied, degraded, intermittent, and limited (DDIL) network environments. We own the full network lifecycle - secure VPN tunnels over tactical radios and satellite links, PKI and cryptographic identity for every node in the mesh, intelligent QoS traffic orchestration, and real-time network observability and management. Security is foundational to everything we build. Every link in the Lattice mesh is authenticated and encrypted, backed by a purpose-built PKI that handles certificate issuance, rotation, and revocation across thousands of intermittently connected nodes. We design to meet rigorous government compliance standards while remaining operationally practical for warfighters in the field.

WHAT YOU'LL DO

• Design and implement Layer 3 networking for DDIL environments — VPN tunnel management, dynamic routing, and multi-path failover across tactical radios, satellite, and wired transports
• Build radio integration layers that abstract diverse tactical waveforms behind a unified networking interface
• Design QoS scheduling and traffic shaping to ensure mission-critical data flows under severe bandwidth constraints
• Build network management and orchestration systems for real-time topology configuration and adaptation
• Architect PKI infrastructure for the Lattice mesh — certificate authorities, automated issuance/renewal, revocation (CRL/OCSP), and secure node bootstrapping
• Design certificate lifecycle management that handles rotation and re-keying across nodes with intermittent connectivity
• Implement zero-trust identity verification across all mesh communication paths
• Treat network observability as a first-class citizen — build Prometheus metrics, Grafana dashboards, eBPF-based instrumentation, and CLI tooling for topology inspection, link health, and certificate status
• Debug complex networking issues from packet captures on deployed assets to cloud infrastructure

REQUIRED QUALIFICATIONS

• 3+ years of professional software engineering experience
• Proficiency in a systems programming language (Rust, C, C++, or Go)
• Strong understanding of Layer 3 networking: IP routing, tunneling (WireGuard, IPsec), TCP/UDP, socket programming
• Experience building distributed or networked systems (SDN/SD-WANs, VPNs, routing daemons, network control planes, or similar)
• Understanding of cryptographic fundamentals: symmetric/asymmetric encryption, digital signatures, certificate chains, TLS
• Experience designing or operating PKI systems (certificate authorities, ACME, EST, or custom issuance protocols)
• Familiarity with asynchronous programming models
• Comfort with network debugging tools (tcpdump, Wireshark, iproute2)
• Must be eligible to obtain and maintain an active U.S. Secret security clearance

PREFERRED QUALIFICATIONS

• Experience with FIPS 140-2/140-3 validated cryptographic modules
• Experience with post-quantum cryptography (PQC) algorithms, migration strategies, and CSNA 2.0 compliance.
• Familiarity with HSMs or TPMs for key protection
• Experience with dynamic routing protocols (OSPF, BGP) or software-defined networking
• Experience integrating with tactical radio systems or military waveforms
• Familiarity with Kubernetes networking (CNI plugins, service mesh, network policies)

US Salary Range

$191,000 - $253,000 USD

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:

At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you're supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits .