Network Engineer, Kubernetes and Cilium

You own networking inside Rillor's Kubernetes clusters, from pod networking to the policies that keep tenants apart. Each workload gets only the network paths it needs, and all other traffic is denied by default.

Team: GPU cluster deployment, Kind: Full-time, Location: Remote, United States, Pay: $128,000 to $178,000 a year

Duties

  • Design and run the cluster network with Cilium: IP management, routing mode, kube-proxy replacement and load balancing.
  • Write and review network policies, with default deny per namespace and egress limited to named destinations.
  • Run ingress and the Gateway API, with TLS on every route.
  • Trace failed or slow connections with Hubble and packet captures.
  • Connect GPU pods to RDMA networks with Multus and SR-IOV, working with the HPC network engineers.
  • Test policies in CI and on live clusters, so a change that opens an unintended path fails before it ships.
  • Plan Cilium and kernel upgrades, and roll them out node by node.

What you bring

  • 3+ years in network or platform engineering, with Kubernetes networking in production.
  • Cilium or Calico, including network policy.
  • Solid TCP/IP, routing, DNS and load balancing, plus working BGP.
  • Linux network tools such as ip, tcpdump, conntrack and nftables.
  • Scripting in Go, Python or Bash.

Nice to have

  • Cilium Certified Associate (CCA).
  • eBPF programming, or debugging with bpftool.
  • Envoy, and mTLS between services.
  • InfiniBand or RoCE for GPU traffic.
  • WireGuard or other encrypted overlays.

Pay and benefits

$128,000 to $178,000 a year

Full-time W-2 employment with health insurance, a retirement plan and paid leave.

No application deadline. We accept applications for this role on an ongoing basis.

Location

Remote, United States

Apply

We review applications as each team grows and contact you when there is a match.

Rillor is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other status protected by law.

If you need an accommodation to apply, email careers@rillor.com.

Notices

Trademarks. NVIDIA, AMD, Ceph, Kubernetes and related product names are trademarks of their owners and are used only to identify products. No affiliation or endorsement is implied.