> Markdown version of [/jobs/ext/1453418-staff-software-engineer-traffic](https://www.wearedevelopers.com/jobs/ext/1453418-staff-software-engineer-traffic). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Software Engineer - Traffic - **Company:** Intuit Inc. - **Location:** Mountain View, CA, United States - **Experience:** Expert - **Salary:** $188,500.0 - $255,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Computer Programming, Distributed Systems, Failure Mode Effects Analysis, OAuth, Reliability Engineering, Software Engineering, Datadog, Load Balancing, Istio, Large Language Models, Amazon Virtual Private Cloud (VPC), Low Latency, Virtual Agents, Api Gateway - **Published:** July 26, 2026 - **Apply:** https://dejobs.org/x/x/D47528A645D24806B994C098480552BA/job/ ## About the Role Required: * 8+ years of software engineering experience, including significant time operating large-scale, low-latency distributed systems in production. * Deep hands-on expertise with Envoy and/or Istio, or equivalent experience with modern service mesh and API gateway architectures (xDS APIs, sidecar/ambient models, traffic routing and policy enforcement). * Strong systems-level programming ability in Go and/or Java, with experience migrating or operating hybrid-language platforms at scale. * Demonstrated experience designing authentication/authorization systems for high-throughput, security-sensitive traffic - bonus for experience with agent-to-service or machine-to-machine auth patterns (OAuth, mTLS, token exchange). * Track record of leading incident response and root-cause analysis for P1-level production issues on infrastructure with broad organizational impact. * Experience with AWS networking and infrastructure (VPC, NAT/TGW, load balancing) and cost/performance trade-offs at scale. * Proven ability to operate as a technical leader without direct reports - influencing through design docs, architecture reviews, and cross-team alignment rather than authority. Preferred: * Direct experience building or operating infrastructure for AI agent traffic - MCP (Model Context Protocol), LLM gateway patterns, or similar emerging agent-to-service protocols. * Experience with eBPF-based traffic capture or observability tooling. * Familiarity with WASM or Go-based Envoy extension development. * Background in FMEA methodology, chaos engineering, or Game Day-style resiliency practices. * Experience operating within a platform team whose systems sit on the critical path for many downstream teams, with the discipline that entails (rigorous rollout gating, backward compatibility, staged enforcement). ## Description Intuit's Traffic Team sits at the center of every request that moves through Intuit's digital ecosystem. The team owns a custom-built API Gateway that handles all North-South traffic across Intuit's products, and a Service Mesh that governs East-West traffic between internal services. As a central platform team, the reliability, security, and performance of this team's systems have a direct and immediate blast radius across every consumer-facing and internal Intuit service - an outage or regression here does not stay contained to one product, it cascades., * Serve as a senior technical leader for the Traffic platform, setting architecture and engineering direction across API Gateway, Service Mesh, and MCP Gateway with a systems-wide view of how they interact. * Drive the technical design and hardening of the MCP Gateway, including authentication flows for AI agent clients, performance and security readiness, and the path from transitional to target-state architecture. * Lead or heavily influence AI-agent-enabled traffic operations work - agent-driven troubleshooting, automated config impact analysis, and service onboarding - as part of the team's recurring delivery cadence. * Own or co-own major migrations (e.g., Envoy adoption, Java-to-Go transitions, ICGW/3X consolidation) end-to-end, from design through rollout, with explicit attention to backward compatibility and blast-radius containment given the platform's central role. * Apply and evolve resiliency practices - FMEA, Game Day exercises, load shedding - to reduce the frequency and severity of P1/P2 incidents on shared infrastructure. * Act as a technical escalation point during high-severity incidents affecting gateway or mesh traffic, driving root-cause analysis and durable fixes (not just mitigation). * Partner cross-functionally with adjacent Principal Engineers and engineering managers across Gateway, Mesh, MCP/3X, and Resiliency to align technical strategy across the org. * Mentor senior and staff-track engineers, and raise the technical bar across the team through design reviews, and hands-on pairing on the hardest problems. * Contribute to FY roadmap planning, providing grounded technical input on scope, sequencing, and risk trade-offs (e.g., what is realistic to land in a given quarter given platform constraints). ## Related Videos - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Envoy Proxy: Documentary Overview](https://www.wearedevelopers.com/magazine/235-envoy-proxy-documentary-overview) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)