Staff Site Reliability Engineer- Networking

Censys is seeking a Staff Site Reliability Engineer to own networking across its hybrid infrastructure. The role sets technical direction and improves reliability across data center, cloud, and edge networking, while mentoring the SRE team and supporting complex incidents.

Responsibilities:

• Own the technical direction for networking across our hybrid environment, spanning data center fabrics, GCP VPC design, Kubernetes networking, and the edge that protects our public-facing platform
• Design and automate our core networking primitives (load balancing, ingress, routing, DNS, BGP peering, TLS termination) so that network changes ship through the same GitOps pipelines as application code
• Lead our cross-datacenter resiliency program for the on-premises scanning platform, including failover architecture and scan platform workloads across globally distributed data centers
• Own edge protection for a platform that both scans the internet and is highly visible on it, including DDoS mitigation, WAF strategy, and the traffic engineering that keeps scan and API infrastructure healthy
• Set networking and reliability standards for the teams that depend on the network, identify the architectural opportunities and technical debt worth addressing before they become liabilities, and get cross-team buy-in for multi-quarter infrastructure initiatives
• Act as a force multiplier for the SRE team, growing its networking depth through mentorship and durable engineering standards rather than becoming its single point of failure
• Stay hands-on, serving as a senior escalation point for complex cross-layer incidents spanning application, Kubernetes, and physical network layers

Requirements:

• A positive attitude biased towards action and iterative problem solving, and a sense of ownership for the outcome of your work rather than the tasks assigned to you
• Deep networking fundamentals. TCP/IP, BGP, anycast, DNS, TLS, and load balancing at scale should be second nature, not reference material
• 10+ years of experience in network engineering, SRE, or infrastructure engineering, with a track record of owning networking in production and leading technical work across team boundaries
• Experience building software to run networks: automation services, health checking, certificate lifecycle management, and traffic management tooling written in a language like Go or Python, not just device configuration
• Experience operating hybrid environments that span physical data centers and public cloud (GCP preferred), including Kubernetes networking (CNI, ingress, service mesh)
• Fluency with infrastructure-as-code and GitOps workflows (Terraform, Crossplane, ArgoCD, or similar) applied to network infrastructure
• Demonstrated ability to drive architectural decisions across teams without formal authority, backed by clear written proposals and data
• Strong communication skills. Explaining a routing incident to leadership and a BCDR tradeoff to product management should both be comfortable territory
• GCP preferred
• Experience running traffic management and delivery at large consumer scale (streaming, CDN, or global anycast footprints)
• A history of automating away toil that others accept as permanent, such as TLS certificate rotation, failover testing, or capacity forecasting
• Familiarity with internet measurement, scanning infrastructure, or the security domain, including how scan traffic interacts with peering relationships and abuse reporting
• Strong interest in harnessing AI and LLM tools as a force multiplier for infrastructure work, from incident analysis to configuration generation
• External knowledge sharing through conference talks, open-source contributions, or technical writing