Staff Software Engineer - Networking

We are looking for a Staff Software Engineer to join Procore’s Government Engineering team as a senior technical contributor on our FedRAMP platform, with a focus on networking and observability.

Responsibilities

• you will write the production software and infrastructure code that runs cloud traffic, service mesh, ingress/egress, and the telemetry pipelines that tell us how all of it is behaving.
• You will bring an SRE mindset to the work, treating reliability, operability, and compliance as engineering problems to be solved in code rather than in tickets.
• The impact of this team is wide: it touches every service inside Procore’s FedRAMP authorization boundary, and MUST respect and protect that boundary.
• We build with modern tooling, including AI-assisted development and AI-driven automation, so that a small team can run a large, compliant platform without drowning in toil.
• Own cloud traffic and service mesh: Design, build, and operate network routing, edge controls, and service mesh for the FedRAMP boundary using
• Istio, Kong, and Cloudflare , with every component defined in code and deployed through automated pipelines.
• Design the metrics, logs, and traces pipelines ( Datadog , OpenTelemetry) that give every team a clear view of their services.
• Define SLOs, build the alerting and dashboards behind them, and make reliability measurable.
• Build the services, controllers, and CLIs (Go, Python, or TypeScript) that automate traffic management, telemetry collection, and compliance evidence, so that platform gaps are closed with code rather than runbooks.
• Use AI-assisted development tooling daily, and build AI-driven automation into the platform: anomaly detection on telemetry, automated triage and remediation of common incidents, and agents that generate and validate compliance artifacts.
• Lead incident response, blameless postmortems, and capacity planning for the networking and observability services.
• Reduce toil systematically and own the reliability roadmap for your area.
• Lead the engineering work that moves internal teams onto centralized, compliant traffic and observability pipelines, from design through cutover.
• Translate FedRAMP controls (NIST SP 800-53) for network security, audit logging, and monitoring into automated, testable implementations, and partner with security on continuous monitoring (ConMon) and assessment readiness.
• Mentor mid-level engineers on SRE practices, infrastructure as code, and compliance-aware design, and raise the engineering bar across the team.
• Experience with on-call ownership, incident command, postmortems, and systematic toil reduction.

Requirements

• US citizenship to work on FedRAMP-compliant projects.
• Candidates must be eligible to work on federal government projects requiring FedRAMP authorization.
• Experience: 8+ years of software, infrastructure, or site reliability engineering experience, including at least 3 years operating within a FedRAMP-authorized or similarly regulated environment (AWS GovCloud experience is a plus).
• Strong programming fundamentals and a track record of shipping production software in Go, Python, or TypeScript to build platform services and automation.
• You write tests, review code, and care about maintainability.
• Production experience with high-throughput ingress/egress, L4/L7 routing, DNS, TLS, and container networking at scale, using tools like Istio, Kong, Cloudflare, and Kubernetes CNIs.
• Hands-on experience designing telemetry pipelines and SLO-based alerting with Datadog, OpenTelemetry, Prometheus, or similar, and using that data to run incident response and drive reliability improvements.
• Extensive experience architecting, operating, and hardening Kubernetes clusters, including policy enforcement (e.g., OPA/Gatekeeper, Kyverno) and secrets management.
• Working fluency with Terraform (or similar), GitOps workflows, and CI/CD pipelines.
• You expect every change to the platform to go through code review and automation.

Preferred

• Comfort using AI-assisted development tools in daily work, and interest in applying AI to operations and automation.
• Experience with IAM architecture (Okta, SAML/OIDC, zero-trust) and FIPS 140-2/140-3 validated cryptography in practice.
• Experience with secrets management platforms operating in FIPS mode (e.g., HashiCorp Vault).
• Familiarity with FedRAMP Rev 5 requirements, STIG application, or CIS benchmark enforcement at scale.
• Experience building AI agents or ML-driven automation for operations (AIOps).
• Security or platform certifications such as CKA/CKS, AWS Certified Security - Specialty, or CISSP.

Pay

• 168,560.00 - 231,770.00 USD Annual This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation.
• Procore is committed to offering competitive, fair, and commensurate compensation.
• Actual compensation will be based on a candidate’s job-related skills, experience, education or training, and location.

This position reports to the Senior Engineering Manager of the Government Engineering team and is a hybrid role based out of our Austin, TX office. Consideration will be made for this role to be based in Carpinteria, the Bay Area, or NYC.

This position requires access to technology, software, and data that is controlled or restricted under U.S. law, regulation, executive order, or government contract.

For Los Angeles County (unincorporated) Candidates

Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.