Senior Software Engineer, Network Infrastructure

Description

At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs.

Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for “Overall NLP Company of the Year.”

Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here.

The future of healthcare is being built right now. Come deliver this transformation.

About the Role

We're hiring a Senior Software Engineer on the Network Infrastructure team to own the networking backbone of our multi-cloud, application, and corporate infrastructure that every other engineering team at Commure relies on. This is a horizontal team supporting multi-product infrastructure, and the network layer is yours to design, build, and operate end-to-end:

Multi-cloud network foundation and IaC

Hybrid and on-prem connectivity

Kubernetes and service networking

Edge, load balancing, and DNS

Network security and zero-trust access

Network observability

Network automation using GitOps

The stack today runs on public cloud (GCP, AWS, and Azure), with all infrastructure defined as code (Terraform and controller-based). Argo CD drives deployment; Helm handles application packaging; Prometheus, Grafana, and OpenTelemetry power observability. Networking is an active build-out toward cloud-native patterns (Kubernetes-native networking, eBPF, Gateway API, service mesh), and the shape of it is yours to define.

This is a hands-on IC role with broad scope. You'll make architectural calls, write the code that matters most, and set the patterns other teams build on.

Responsibilities

• You'll own several of these verticals within the team's scope end-to-end.
• Own the multi-cloud network foundation: VPC design, routing, transit hubs, IPAM and IPv6, and multi-region failover across GCP, AWS, and Azure. Managed as code with Terraform and Crossplane
• Build hybrid and on-prem connectivity: IPsec VPN, BGP, Cloud Interconnect / Direct Connect / ExpressRoute, and traffic engineering for data centers, regional hubs, and remote offices
• Design the Kubernetes networking layer: CNI (Cilium, eBPF), ingress via Gateway API and Envoy, Istio (or equivalent) service mesh, and mTLS
• Run the edge: load balancing, DNS, WAF, DDoS mitigation, and rate limiting
• Secure the network by default: firewalls, segmentation, zero-trust access, and encryption in transit. Partner with Security on policy-as-code that meets HIPAA and SOC 2
• Own network observability: flow logs, packet capture, and eBPF visibility (Hubble), wired into OpenTelemetry, Prometheus, and Grafana
• Treat the network as code: GitOps with Argo CD, pre-merge validation, and self-serve modules for product teams
• Debug the hard problems: TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking
• What You Have
• 6+ years of experience in cloud native networking or infrastructure engineering
• Deep expertise in network fundamentals: TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking
• Experience with public cloud networking (GCP, AWS, Azure)
• Experience with Kubernetes and cloud-native networking (CNI, eBPF, Gateway API, Envoy, Istio)
• Experience with Infrastructure-as-Code (Terraform, Pulumi)
• Experience designing and operating VPN and site-to-site connectivity at scale
• Experience with BGP route filtering, multi-path routing, and traffic engineering
• Experience with network security: firewalls, WAF, DDoS mitigation, segmentation, and zero-trust
• Experience with network observability and performance troubleshooting (flow logs, packet analysis, latency, packet loss)
• Preferred
• Experience with Cloud Interconnect (Dedicated Interconnect, Direct Connect, ExpressRoute)
• Experience with kernel network tuning and BGP route optimization
• Experience running DNS infrastructure at scale
• Experience with on-prem or hybrid environments and data center networking
• Contributions to CNCF networking projects (Cilium, Envoy, Istio)
• Experience with network automation and testing (GitOps, Batfish, containerlab)
• Experience in regulated industries with HIPAA, SOC 2, or PCI obligations
• You don't need to check every box: strong network fundamentals, cloud native or Kubernetes background matter most.
• Please be aware that all official communication from us will come exclusively from email addresses ending in @ commure.com . Any emails from other domains are not affiliated with our organization.
• Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.