> Markdown version of [/jobs/ext/1899538-principal-engineer-networking-packet-forwarding](https://www.wearedevelopers.com/jobs/ext/1899538-principal-engineer-networking-packet-forwarding). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Engineer - Networking (Packet Forwarding

- **Company:** ALKIRA, INC.
- **Location:** San Jose, CA, United States
- **Salary:** $175,000.0 - $250,000.0
- **Contract:** Permanent contract
- **Skills:** Adobe InDesign, Artificial Intelligence, Cloud Computing, Cloud Computing Security, Computer Programming, Software Debugging, Network Address Translation, Programming Tools, Distributed Systems, Internet Protocol Security (IP SEC), Python (Programming Language), Network Security, Network Connections, Network Planning and Design, Routing, Network Administration, Performance Tuning, Zero Trust Network Access, System Programming, Systems Integration, Encapsulation (Networking), Wide Area Networks, Network Switches, Scripting, Computer Network Operations, Concurrency, Backend, Build Management
- **Published:** July 31, 2026
- **Apply:** https://www.careerbuilder.com/job-details/principal-engineer-networking-packet-forwarding-san-jose-ca--b4130893-61fd-4026-810a-3c6ef2b59580

## About the Role

Expert C, with real depth in systems programming, memory, concurrency, and performance. This is the core skill for the fastpath. Years in the data plane, with a track record of owning and delivering complex, high-performance forwarding work. VPP and/or DPDK in production, or a comparable userspace fastpath framework, at real scale. Strong grasp of tunneling and encryption (VXLAN, IPsec, GRE) and how packets are encapsulated, encrypted, and translated. Network-security depth: encryption, secure tunneling, and how access and data policy is enforced in the data plane. Distributed-systems fundamentals: how the datapath's control, state, and observability behave across a fleet. Strong Go and Python for the agents, exporters, tooling, and CLI around the fastpath. A track record of leading delivery: working with and leading engineers to ship and stabilize features, and staying calm and methodical when things break., Production IPsec implementations Carrier-grade or large-scale production networking (switching, routing, or service-provider platforms). NIC and driver technologies like SR-IOV and DPDK poll-mode drivers, and adapting the datapath to new instance types. Cloud networking depth: how the major providers' instance types and networking constructs affect datapath performance. A background in cloud security or zero-trust (ZTNA) at the data-plane level. Performance and scale tuning for packet-processing systems. + Building or integrating VNFs. Experience with AI development tools like Claude Code., Artificial Intelligence (AI), Behave (Python Framework), Cloud Computing, Concurrency, Cryptography, Customer Support/Service, Datapath Design, Debugging Skills, Distributed Computing, GRE (Generic Routing Encapsulation), IPsec (IP Security), Kernel Programming, Machine Tool, Memory Hardware, Mentoring, NAT (Network Address Translation), National Intelligence Council (NIC), Network Administration/Management, Network Connectivity, Network Design, Network Operations Center, Network Performance/Analysis, Network Switching, On Call, Performance Management, Performance Tuning/Optimization, Problem Solving Skills, Programming Tools, Python Programming/Scripting Language, Root Cause Analysis, Systems/Internals Programming, Test Plan/Schedule, Vehicle Fleets, Wide Area Network (WAN)

## Description

Alkira's Data Path Team owns the lowest and most performance-critical layer of the product: the fast path that forwards customer traffic at line rate, the encryption that protects it, and the address translation and tunneling that connect customer networks across clouds. At the core is a stateful, flow- and session-based engine that tracks every connection and applies routing, translation, and policy as packets pass through.

As a Principal Engineer on this small, specialized team, split between the US and India, you'll own several of the datapath's most critical features end to end: building them in C, delivering them with the team, and keeping them healthy in production. You'll stay hands-on in the code, help shape where the datapath goes next, and take point on the hardest production issues.

RESPONSIBILITIES

Own several of the datapath's most critical features end to end, from design through delivery to their long-term health in production. Design and build the most demanding parts of the C fastpath (VPP/DPDK) yourself; this is a hands-on role. Build and evolve the core of the datapath: the stateful flow and session engine, including connection tracking, NAT, policers, and per-packet, per-tenant policy. Own how customer networks connect securely across clouds, through IPsec and overlay tunnels like VXLAN, GRE, and GENEVE. Tune the datapath at the kernel, driver, and packet-path level as cloud providers ship new instance types and NIC features like SR-IOV and poll-mode drivers. Work with and lead other engineers to deliver datapath features and keep them stable once they ship. Take part in design and architecture reviews, work through the hard trade-offs, and mentor the engineers around you. Advise Solution Architects and customers on network design so their deployments hold up in production.
Drive root-cause analysis on the hardest production issues at the packet and kernel level, partnering with the Routing, Backend, and Escalations teams. Share the on-call rotation. On-call is a required part of this role; the team provides round-the-clock coverage across the US and India for production datapath issues. Use AI tools like Claude Code to build tooling, write tests, and debug faster.


## Related Videos

- [Developing the Backend with Stefan Lingler, CTO at Shpock](https://www.wearedevelopers.com/videos/100360-developing-the-backend-with-stefan-lingler-cto-at-shpock)
- [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network)
- [Nest.js - TypeScript in the backend can also be clean](https://www.wearedevelopers.com/videos/1033-nest-js-typescript-in-the-backend-can-also-be-clean)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Graph and AI Trends 2026: Why Is AI Running but Not Yet Delivering?](https://www.wearedevelopers.com/magazine/680-graph-and-ai-trends-2026-why-is-ai-running-but-not-yet-delivering)