Embedded Software Engineer (Network Gateway)

ubiquiti

Skills

We will contact candidates who meet our criteria within the next two weeks.

At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere.
To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions.
Our growth is made possible by the dedicated team of hundreds behind the scenes.
From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT.
At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity.

Design and deliver routing, security, and connectivity features for the UniFi Gateway product line.
Work across the stack, from the Linux kernel and data plane to the networking control plane and device APIs.
Build advanced gateway capabilities across routing, SD-WAN, VPN, firewalling, traffic inspection, and identity-based networking.
Own complex networking features from architecture and implementation through deployment at UniFi scale.
Work closely with Product, Hardware, Support, and QA teams to deliver customer-facing features and fixes.

5+ years of software development experience.
Strong C/C++ development and debugging skills.
Strong knowledge of Linux internals and Linux networking.
Strong understanding of TCP/IP, routing, NAT, firewalling, and network security.
Experience developing gateway features such as routing, VPN, firewall, QoS, or security.
Experience debugging complex networking and system-level issues on embedded Linux.
Ability to design and discuss software at the architectural level.
Strong ownership, communication, and problem-solving skills.
Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or equivalent practical experience.

Dynamic routing: FRR, BGP, OSPF, BFD, PIM, VRF, and route leaking.
VPN/IPsec: strongSwan, IKEv2, XFRM/VTI, certificate-based authentication, NHRP/ADVPN-style dynamic overlays.
SD-WAN: SLA probing, application-aware path selection, per-flow steering, multi-WAN load balancing and failover.
Linux networking: netfilter, conntrack, nftables/iptables, traffic shaping (tc, HTB, CAKE).
Network security: DPI, IDS/IPS (Suricata, Snort), TLS inspection, and threat intelligence.
Data-plane acceleration: hardware flow offload, DPDK/VPP, XDP/eBPF, and network performance optimization.
High availability: VRRP, session synchronization, conntrackd, and clustering.
Identity-based networking: RADIUS, LDAP/AD, 802.1X, PKI, and certificate management.
Embedded Linux: Debian packaging (dpkg/apt), systemd, BSP, and Linux device driver development.