Software Engineer (Python)

• The orchestration control plane (Python 3.12, asyncio) - translating POST/DELETE into network deployments: resource allocation (IPAM, port/route-distinguisher/GRE-ID pools), Postgres-backed job queues (SKIP LOCKED), retries, rollback on partial failure, deploy/decommission runners, and long-running health-check and reconciliation daemons.
• The network automation layer - Ansible + asyncssh/netmiko pushing Jinja2-templated config to a fleet of Linux and VyOS nodes: WireGuard interface and peer lifecycle, FRR/VyOS BGP (VRFs, route reflectors, BGP labels), GRE tunnels, static NAT and firewall rules, Unbound DNS, anycast announce/withdraw driven by health checks, and config-drift detection.
• Cloud interconnect integrations - Equinix Fabric and Equinix Metal APIs to land virtual cross connects into AWS, Azure, and Google Cloud regions.
• Envoy-based data planes - a Go xDS control plane on envoyproxy/go-control-plane, pushing CDS/RDS/EDS over ADS to edge and gateway Envoy fleets.
• Production - Prometheus/Telegraf metrics and alerting, Bugsnag, customer escalations that span app logic and the network, and billing sync (MRC) for network resources.

Tech stack (what you’ll actually touch)

• Languages: Python (asyncio: aiohttp, uvloop, SQLAlchemy, Alembic, aiopg), Go (Envoy control plane), Jinja2, Bash
• Data: PostgreSQL (schema design, migrations, advisory locking, as a job queue), RabbitMQ
• Network OS / routing: VyOS, FRR, Linux networking (VRFs, netfilter/NAT, netplan, GRE, WireGuard), BGP (VRFs, route reflectors, communities/labels, anycast), Unbound
• Automation: Ansible / ansible-runner, netmiko, asyncssh, NetBox-style IPAM (pynetbox, netaddr)
• Proxy / data plane: Envoy, xDS (ADS, go-control-plane)
• Vendor & cloud: Equinix Fabric, Equinix Metal, AWS / Azure / GCP interconnect regions
• Platform: Docker/OCI, GitHub Actions, HashiCorp Vault, OpenAPI 3 + Redocly, pytest (unit * e2e), mypy/ruff/black
• Architecture: clean/hexagonal (usecases, repository interfaces, adapters) - the service is structured, not a script pile, * Not a NetOps/NOC role. The deliverable is software - APIs, control planes, automation - not manual device changes.
• Not a pure backend CRUD role. If the network layer in the stack above reads as someone else’s problem, this is the wrong fit., What is your base salary expectation? Please indicate either USD or EUR.* Where are you currently located?* Select… Are you legally authorized to work in the country in which this role is located?* Select… Do you now or in the future require Visa sponsorship for employment? * Please note that visa sponsorship is not automatically provided for all positions and varies depending on the specific role and its requirements.* Select…

Please note that visa sponsorship is not automatically provided for all positions and varies depending on the specific role and its requirements. OFAC: Please indicate whether you are either a citizen or lawful permanent resident of any of the following countries: Cuba, Crimea, Iran, North Korea, Russia, Syria or Sudan.* Select…

For OFAC Compliance, We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process. How would you describe your gender identity? (mark all that apply) Select… How would you describe your racial/ethnic background? (mark all that apply) Select… How would you describe your sexual orientation? (mark all that apply) Select… Do you identify as transgender? Select… Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? Select… Are you a veteran or active member of the United States Armed Forces? Select…

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Telnyx’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Select… Are you Hispanic/Latino? Select… Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A “disabled veteran” is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.

An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Select…

• You’ve built and operated customer-facing REST APIs over real infrastructure - APIs where a POST ends in a router being configured, not just a row inserted - and you’ve lived with the async-job, rollback, and eventual-consistency problems that creates.
• Strong async Python in production, and comfortable writing and reviewing Go.
• Working routing knowledge: you can configure and debug BGP sessions, VRFs, GRE tunnels, NAT, and WireGuard, and read FRR or VyOS configs. Certification not required; hands-on ability is.
• Postgres beyond ORM basics - migrations on live systems, locking semantics, queue patterns.
• Fleet automation over SSH - Ansible at production scale, idempotent roles, safe rollout/rollback, drift detection.
• You’ve debugged incidents across layers in one sitting - tcpdump, wg show, vtysh, and application logs - ending in either a code fix or a config fix, and knowing which.

Bonus points for

• Envoy/xDS control-plane work (go-control-plane, ADS snapshots).
• Cloud interconnect products - AWS Direct Connect, Azure ExpressRoute, GCP Partner Interconnect, or Equinix Fabric/Metal provisioning APIs.
• IPAM internals (NetBox or equivalent), address-plan and route-distinguisher design.
• Linux * VyOS (or equivalent NOS) migration experience on live customer traffic.
• Mobile core exposure - routing toward PGW/PCEF/EPC, GRE toward packet gateways.
• OpenAPI spec authorship and public developer documentation.
• Operating multi-site PoP fleets (bare metal + Equinix-hosted).

About Telnyx

Telnyx is an industry leader that’s not just imagining the future of global connectivity-we’re building it. From architecting and amplifying the reach of a private, global, multi-cloud IP network, to bringing hyperlocal edge technology right to your fingertips through intuitive APIs, we’re shaping a new era of seamless interconnection between people, devices, and applications.

We’re driven by a desire to transform and modernize what’s antiquated, automate the manual, and solve real-world problems through innovative connectivity solutions. As a testament to our success, we’re proud to stand as a financially stable and profitable company. Our robust profitability allows us not only to invest in pioneering technologies but also to foster an environment of continuous learning and growth for our team.

Our collective vision is a world where borderless connectivity fuels limitless innovation. By joining us, you can be part of laying the foundations for this interconnected future. We’re currently seeking passionate individuals who are excited about the opportunity to contribute to an industry-shaping company while growing their own skills and careers.

We’re looking for a senior engineer who lives at the seam between software and the network - someone who’s built customer-facing APIs where a POST doesn’t end at a database row, it ends at a router being configured in a PoP. You’re strong in async Python, comfortable in Go, and you can read an FRR or VyOS config as easily as an application stack trace. You’ve lived with the async-job, rollback, and eventual-consistency problems that come from programming real infrastructure through an API, and you’re happy in a fast-paced environment where the thing you ship is visible and consequential.

The Opportunity

Telnyx sells networking as an API product: Private Networks, WireGuard interfaces, Virtual Cross Connects into AWS/Azure/GCP, anycast Global IP, and Public Internet Gateways. A small team owns this end-to-end - the public REST API, the orchestration control plane behind it, and the automation that programs real routers across our US, EU, and APAC PoPs.

This role is the full stack of that. You design the API resource, write the orchestration code that turns a request into a network deployment, and own the BGP config it renders onto the fleet. You’ll be part of a small, focused team where you own products from the developer-facing spec all the way down to the config on the box - and where the network layer isn’t someone else’s problem, it’s the point.