Senior DevOps Engineer, Networking

Why Join Kai

• Well-funded: With $125M raised, we have the capital, runway, and resolve to rebuild cybersecurity from first principles.
• Proven: We've earned the trust of Fortune 500 and Global 1000 companies, and we're just getting started. Their confidence in Kai reflects what we've built: an AI-powered cybersecurity platform that performs at the scale and speed the enterprise demands.
• Experienced founders: Our founding team consists of second-time entrepreneurs, each with over 20 years of experience in the cybersecurity industry. Their proven expertise and vision drive our ambitious goals.
• World-class leadership team: Our Heads of AI, Engineering, and Product bring extensive experience from some of the world’s most influential companies, ensuring top-tier mentorship, direction, and vision.
• Frontier AI Applied Research Team: Our researchers operate at the leading edge of agentic AI systems, translating breakthrough capabilities into real-world cybersecurity applications.
• Generous compensation: We offer highly competitive salaries, equity options, and a supportive work environment. Your contributions will be valued and rewarded as we grow together.

Why This Role Matters

• Kai's customers are Fortune 500 and Global 2000 enterprises with strict security, compliance, and availability requirements. The network infrastructure that underpins our platform must be resilient, multi-tenant, and zero-trust from the ground up. This is not a maintenance role — you are architecting and owning the production cloud network that our customers depend on and that our platform operates across. The work you do here directly affects customer trust, product reliability, and Kai's ability to scale.

What You'll Do

• Design, implement, and maintain highly available, resilient multi-region cloud networks capable of supporting strict enterprise SLAs.
• Architect and manage strict logical segmentation, virtual routing (VRFs), and zero-trust boundaries across shared cloud infrastructure to ensure total data isolation between tenants.
• Engineer and optimize high-scale, multi-tunnel IPsec VPN topologies and Cloud-WAN architectures to interconnect distributed on-premise infrastructure and multi-cloud environments seamlessly.
• Deploy and tune global edge services — including CDNs and WAF rulesets — to optimize application performance while defending against web vulnerabilities and DDoS attacks.
• Manage next-generation firewalls — specifically Palo Alto Networks VM-Series and Panorama — to enforce strict access controls, threat prevention, and secure traffic inspection.
• Drive a software-defined everything approach, provisioning and managing 100% of network infrastructure via Terraform pipelines to eliminate configuration drift.

What We're Looking For

• 5+ years of dedicated network engineering experience, with at least 3+ years focused on production-grade cloud environments — AWS, GCP, or Azure.
• Proven track record of designing and operating secure multi-tenant cloud networks with strict compliance and isolation requirements.
• Deep hands-on expertise in building, scaling, and troubleshooting complex, high-density multi-tunnel IPsec architectures.
• Robust experience deploying and operationalizing Palo Alto Networks firewalls — VM-Series and Panorama — including centralized policy management.
• Direct experience hardening the cloud perimeter using enterprise CDNs — Cloudflare, Akamai, or equivalent — and advanced WAF configuration.
• High proficiency using Terraform for the continuous delivery and automation of cloud network resources — VPCs, routing tables, gateways, security groups.

Work Location

San Jose, CA (5 days in the office)

Engineering

San Jose, CA