Amazon Web Services is looking for a Sr. Software Development Engineer to join our growing Amazon Elastic Container Services for Kubernetes (EKS) team. Amazon EKS is our managed Kubernetes service that makes it easy for customers to use Kubernetes without needing to become experts in provisioning and operating Kubernetes. EKS manages time-consuming administrative tasks like setting up, operating, scaling and updating Kubernetes, freeing customers up to focus on their applications.
The EKS Networking team builds the networking stack that connects customer workloads running on EKS clusters. We own the VPC CNI, which runs in the majority of EKS clusters worldwide, and an eBPF-based network policy enforcement path that replaced third-party dependencies with a native implementation. We are now building a service mesh, an Istio or Istio-like capability (traffic management, mTLS, policy, and observability) that avoids the per-pod sidecar tax by leaning on the kernel and the networking stack we already own. You will be joining a fast paced team working on greenfield projects, building the data path for that mesh.
You will own how traffic is intercepted, encrypted, and forwarded between services, deciding where Layer 4 and mTLS live (a per-node proxy and the kernel) versus where Layer 7 processing happens, and owning the performance budget that justifies a sidecarless design. You will be solving challenging technical problems, often ones not solved before, alongside peers with remarkable technical expertise. The solutions you build will be high impact and rolled out to our large customer base across the world. If you are excited to work in a dynamic environment, we would love to hear from you!
Mentorship & Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future.
Key job responsibilities
Key job responsibilities
- Design the mesh data path: traffic interception, encryption, and forwarding between services without a per-pod sidecar.
- Decide where Layer 4 and mTLS enforcement live (per-node proxy and the kernel) versus where Layer 7 processing happens, and own the handoff between them.
- Own the data path performance budget (latency, CPU, memory) against a per-pod sidecar baseline, with measured results.
- Partner with the control plane, kernel/eBPF, and protocols engineers whose subsystems run inside the path you design.
- Raise the bar through design reviews and code reviews, and mentor engineers building on the data path.
