Staff Site Reliability Engineer- Networking
Staff-level SRE who owns networking across Censys' hybrid infrastructure — data center fabrics, GCP VPCs, Kubernetes networking, and edge/DDoS protection for its internet-scanning security platform. Sets technical direction, automates network changes via GitOps (Go/Python, Terraform), and leads cross-datacenter resiliency.
- Compensation
- $172K–$233K / yr
- Location
- Remote (US or Canada)
- Work setup
- Remote
- Seniority
- Staff
- Employment
- Full time
- Experience
- 10+ years
- Category
- Sre
- Posted
Skills
Must have
- Positive attitude biased towards action and ownership of outcomes
- Deep networking fundamentals: TCP/IP, BGP, anycast, DNS, TLS, load balancing at scale
- 10+ years in network engineering, SRE, or infrastructure engineering with production networking ownership
- Experience building software to run networks (automation, health checking, cert lifecycle, traffic tooling) in Go or Python
- Experience operating hybrid environments spanning physical data centers and public cloud (GCP preferred), including Kubernetes networking (CNI, ingress, service mesh)
- Fluency with infrastructure-as-code and GitOps workflows (Terraform, Crossplane, ArgoCD, or similar)
- Ability to drive architectural decisions across teams without formal authority, with written proposals and data
- Strong communication skills for both technical and leadership audiences
Nice to have
- Experience running traffic management/delivery at large consumer scale (streaming, CDN, global anycast)
- History of automating toil such as TLS certificate rotation, failover testing, or capacity forecasting
- Familiarity with internet measurement, scanning infrastructure, or security domain, incl. peering/abuse interactions
- Interest in using AI/LLM tools for infrastructure work (incident analysis, config generation)
- External knowledge sharing via conference talks, open source, or technical writing
Full description
##
Join the team, turning internet intelligence into real-world security outcomes. Built on the world’s most comprehensive and accurate map of the Internet, the Censys Platform delivers real-time visibility and actionable intelligence needed to accelerate triage, investigate threats, hunt adversaries, and manage Internet exposure. We're trusted by half of the Fortune 500 and government agencies all around the world, and looking for people as passionate about the problems we're solving as we are.
At Censys, we’re on a mission to provide best in class internet visibility and intelligence to the global security community. Our platform helps security teams uncover hidden threats, gain actionable insights, and build proactive defense strategies. Trusted by organizations worldwide, Censys cuts through the noise to surface the most critical risks, enabling teams to respond faster, and stay ahead of attackers. We’re constantly pushing the boundaries of what’s possible to help our customers see and secure the internet more clearly than ever before.
Location: This position is remote within the United States.
Role Summary
Censys is seeking a Staff Site Reliability Engineer to own networking across our hybrid infrastructure. Our platform scans the entire reachable internet from globally distributed data centers and serves that intelligence to customers in real time, which means the network is not a supporting layer for us, it is the product. We’re looking for an engineer who can set the technical direction for networking across data center, cloud, and edge environments, treat network infrastructure as software, and raise the reliability bar for every team that depends on it.
What You’ll Do
- Own the technical direction for networking across our hybrid environment, spanning data center fabrics, GCP VPC design, Kubernetes networking, and the edge that protects our public-facing platform
- Design and automate our core networking primitives (load balancing, ingress, routing, DNS, BGP peering, TLS termination) so that network changes ship through the same GitOps pipelines as application code
- Lead our cross-datacenter resiliency program for the on-premises scanning platform, including failover architecture and scan platform workloads across globally distributed data centers
- Own edge protection for a platform that both scans the internet and is highly visible on it, including DDoS mitigation, WAF strategy, and the traffic engineering that keeps scan and API infrastructure healthy
- Set networking and reliability standards for the teams that depend on the network, identify the architectural opportunities and technical debt worth addressing before they become liabilities, and get cross-team buy-in for multi-quarter infrastructure initiatives