Staff Networking Platform Engineer, Infrastructure

Mural Group; San Francisco, New York (CA, NY); Hybrid; USD 270,000 - 462,000; Full time

Job summary

Mural Group is seeking a senior networking engineer to own networking across our platform. You will drive design and operation of Kubernetes-native networking, data center fabric, and GPU interconnects to deliver isolated, high-performance clusters for AI workloads.

You will define feature requests, automate lifecycles, and ensure telemetry, security and policy enforcement across multi-site environments. This role is remote within the US with future hybrid plans.

Qualifications

• Deep networking knowledge including TCP/IP, BGP, routing policy, ECMP and segmentation.
• Production ownership of bare-metal leaf-spine data center networks with VLANs/EVPN/VXLAN.
• Kubernetes networking experience and CNI behavior (Calico/Cilium).

Responsibilities

• Define how networking features are requested, provisioned, changed, observed and removed.
• Automate tenant and node network lifecycles with Kubernetes-native tooling and safe recovery from partial failures.
• Manage BGP, routing policy, VLANs and overlays, plus VIPs, load balancers and public IPs via fabric APIs.
• Automate GPU networking (NVL72, InfiniBand, RoCE) and verify isolation and performance.
• Own IPAM and inventory integration to keep config, state and inventory in sync.
• Set segmentation and traffic policy with security engineering; enforce via GitOps and drift reconciliation.
• Own network telemetry, troubleshooting and incident response.

Skills

Deep networking

Kubernetes networking

BGP

TCP/IP

CNI (Calico/Cilium)

GitOps

Network security

Bare-metal networks

Tools

Kubernetes

InfiniBand

NVL72

NetBox

Job description

Location: Remote (US). Must be based in Dallas, San Francisco or New York City. Remote for now, with hybrid planned further down the road.

Pay:

• L6 (Staff): $270,400-$365,800

• L7 (Sr. Staff): $341,400-$461,800

Compensation is not an issue for the right person. The role pays nearly all cash: the bonus is folded into base, and there is an equity component on top.

A late-stage AI cloud company backed by NVIDIA, with a valuation in the billions, runs AI compute out of data centers around the world. It is now building a managed Kubernetes platform that turns large fleets of bare-metal GPU compute into dedicated, isolated clusters for customers running AI training and inference. This role owns networking across the whole platform, from Kubernetes cluster networking down through the data center fabric and GPU interconnect, and turns customer connectivity, isolation and performance needs into managed platform features.

What you'll do

• Define how networking features are requested, provisioned, changed, observed and removed

• Automate tenant and node network lifecycles with Kubernetes-native tooling, including safe recovery from partial failures

• Manage BGP, routing policy, VLANs and overlays, plus VIPs, load balancers and public IPs, through fabric APIs

• Automate GPU networking (NVL72, InfiniBand, RoCE, GPUDirect) and validate isolation and performance

• Own IPAM and inventory integration so intended config, applied state and inventory stay in sync

• Set segmentation and traffic policy with security engineering, and standards enforced through GitOps and drift reconciliation

• Own network telemetry, troubleshooting and incident response

What you bring

• Deep networking: TCP/IP, BGP, routing policy, ECMP, segmentation, interconnects

• Production ownership of bare-metal leaf-spine data center networks with VLANs, VRFs and EVPN/VXLAN

• Kubernetes and Linux networking: CNI behavior, Cilium or similar, network policy

• Kubernetes controllers, operators or custom resources in Go, with GitOps and controlled rollouts

• Multitenant infrastructure or managed Kubernetes products

• Securing networks that run customer workloads

Nice to have: Netris, UFM or NetBox; NVIDIA AI networking (InfiniBand, Spectrum-X, RDMA, RoCE, congestion control); networking for large GPU clusters, including multi-site