Principal Software Engineer - Networking

Overview

Imagine working at the forefront of the cloud industry, redefining where Kubernetes can run. The AKS Flex team is building the next generation of Azure Kubernetes Service: a single AKS control plane that can manage worker nodes running anywhere, whether in other Azure regions, on-premises data centers, bare-metal fleets, edge sites, or other clouds.

We are hiring a Principal Software Engineer to build the networking that makes this possible. You will design the multi-site connectivity behind flex nodes for AKS and Unbounded, our open-source project for joining any Linux machine to a Kubernetes cluster across sites and networks, so that pods and nodes in any location behave as part of one cluster. You will also bring high-performance fabrics to GPU and AI workloads running across this distributed footprint.

You will solve deeply technical problems in overlay and underlay networking, routing, dataplane performance, secure connectivity, and reliable production operations at global scale. Your work will directly unlock capacity for GPU-hungry AI workloads, data-residency-constrained customers, and organizations that want one operating model for all of their compute.

This is a unique opportunity to define the networking architecture of a new product area from its early days, represent Microsoft in the open-source community, and shape what hyperscale managed Kubernetes looks like without boundaries.

Responsibilities

• Own the networking architecture for flex nodes and Unbounded, and help define the multi-year technical roadmap for AKS Flex in partnership with product and engineering leadership.
• Lead cross-organization design efforts spanning AKS, Azure networking, compute, and identity, driving alignment on interfaces, tradeoffs, and sequencing.
• Build multi-site networking that gives pods transparent connectivity across sites, using encrypted overlays (e.g., WireGuard), tunneling (GENEVE, VXLAN, IPIP), direct L3 routing, BGP, and eBPF dataplanes.
• Design networking for nodes that live far from their control plane, handling high and variable latency, intermittent connectivity, partial partitions, NAT traversal, and secure communication with the API server.
• Drive the performance, scale, and reliability of the networking dataplane and control plane across a global fleet, including throughput, latency, encryption overhead, and route and policy scale.
• Integrate high-performance fabrics such as InfiniBand and RDMA for distributed AI training and inference across heterogeneous and remote hardware.
• Participate in production operations and on-call rotations, turning operational learnings into durable engineering improvements.
• Partner across AKS and Azure teams to deliver secure, compliant, and resilient infrastructure.

Qualifications

Required Qualifications:

Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, Go, Rust, C, C++, C#, Java, or Python OR equivalent experience.

Other Requirements

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Preferred Qualifications

Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, Go, Rust, C, C++, C#, Java, or Python.