No visa sponsorship is available for this position.
Interested in building the Kubernetes networking platform that safely manages CNI, service mesh, ingress, policy, and environment-networking workflows across large fleets of Kubernetes clusters that power Oracle SaaS?
Oracle SaaS "Spectra" Platform Engineering is hiring engineers to build the networking platform services that power OSSP-managed Kubernetes environments at Oracle SaaS scale.
This role focuses on the Environment Networking layer of OSSP: designing and implementing APIs, workflows, automation, and Kubernetes integrations that safely install, update, observe, and operate in-cluster networking components across large fleets of Oracle Kubernetes Engine clusters. The work includes CNI lifecycle management, service mesh and ingress component packaging, environment egress/network policy APIs, and Helm chart and artifact automation.
You will work on Go-based services, gRPC/protobuf APIs, async workflow orchestration, Kubernetes-hosted components, and release automation that supports technologies such as Cilium, Linkerd, Traefik, Gatekeeper, Helm, and OCI build pipelines.
While we are primarily a Go shop familiarity with multiple languages is preferred. We operate and/or develop services in Go, Java, Rust, Scala, and more.
About OSSP
Oracle SaaS "Spectra" Platform (OSSP) is a managed platform that abstracts the complexity of Kubernetes and Oracle Cloud Infrastructure away from internal Oracle SaaS teams looking to migrate and develop services in container-native environments.
OSSP manages the lifecycle, health, and operational safety of Kubernetes environments at large scale, enabling SaaS teams to build and operate services without needing to directly manage the underlying cluster, networking, and platform infrastructure.
Responsibilities
As a member of the OSSP Engineering team, you will:
- Design and implement services and gRPC/protobuf APIs for environment networking operations such as CNI install/update, status polling, and environment network state visibility.
- Build safe async workflow execution for long-running networking operations, including idempotency, durable operation status, retry/recovery behavior, and terminal/non-terminal state handling.
- Develop automation for packaging, publishing, and rolling forward in-cluster networking components, including Helm charts, OCI artifacts, vendored packages, and environment BOM updates.
- Integrate networking workflows with OSSP management-plane create/update paths and validate behavior in development and production-like environments.
- Own lifecycle and health tooling for Kubernetes networking components across large fleets of OSSP-managed clusters.
- Troubleshoot complex issues involving Kubernetes networking, generated SDKs, protobuf contracts, vendored dependencies, Helm charts, and service rollout behavior.
- Collaborate with platform, networking, and service teams to evolve environment networking APIs and operational safety mechanisms.
- Improve reliability, observability, and operational readiness for services that manage critical networking functionality across OSSP environments.
Required Qualifications
- Strong development experience building backend services, APIs, or platform automation.
- Experience with Kubernetes networking concepts and CNI-based systems.
- Experience designing, implementing, or consuming gRPC/protobuf APIs.
- Experience managing generated SDK/client compatibility across service boundaries.
- Experience with Helm charts, Kubernetes manifests, release automation, and artifact publishing.
- Strong understanding of distributed systems patterns such as async workflows, polling APIs, idempotency, retries, state persistence, and safe concurrent operations.
- Practical Linux and cloud networking knowledge, including routing, subnetting, security rules, and service-to-service connectivity.
- Ability to troubleshoot complex integration issues across services, generated code, vendored dependencies, and Kubernetes runtime behavior.
Preferred Qualifications
- Experience with Cilium or other production CNI implementations.
- Experience with Temporal or similar workflow orchestration systems.
- Experience with Oracle Cloud Infrastructure, Oracle Kubernetes Engine, VCNs, VCN peering, and cloud-native networking at fleet scale.
- Experience with Linkerd, Traefik, Istio, Gatekeeper, service mesh, ingress, or policy enforcement components.
- Experience maintaining vendored dependencies, build pipelines, BOMs, or internal platform release trains.
- Familiarity with low-level networking protocols such as TCP/IP and TLS.
- Experience operating or developing multi-tenant internal platforms for application teams.
- Experience with Terraform or similar infrastructure-as-code tooling.
Technologies and Domains
Candidates should be excited to work in several of the following areas:
- Kubernetes networking
- CNI lifecycle management
- Cilium
- Service mesh and ingress
- Linkerd, Traefik, Istio, and Gatekeeper
- Go services
- gRPC and protobuf
- Helm charts and Kubernetes manifests
- OCI build and artifact publishing
- Environment BOM and package automation
- Async workflow orchestration
- Fleet-scale platform operations
- Oracle Cloud Infrastructure and Oracle Kubernetes Engine
Success in This Role
A successful engineer in this role will be able to move comfortably between platform service development, Kubernetes networking behavior, and release automation. They will design APIs that are safe for large-scale operations, implement workflows that tolerate retries and partial failures, automate repetitive packaging and rollout work, and collaborate across teams to make environment networking reliable and observable for Oracle SaaS customers.
Disclaimer:
Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.
Range and benefit information provided in this posting are specific to the stated locations only
US: Hiring Range in USD from: $96,800 to $223,400 per annum. May be eligible for bonus and equity.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
- Medical, dental, and vision insurance, including expert medical opinion
- Short term disability and long term disability
- Life insurance and AD&D
- Supplemental life insurance (Employee/Spouse/Child)
- Health care and dependent care Flexible Spending Accounts
- Pre-tax commuter and parking benefits
- 401(k) Savings and Investment Plan with company match
- Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
- 11 paid holidays
- Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
- Paid parental leave
- Adoption assistance
- Employee Stock Purchase Plan
- Financial planning and group legal
- Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Career Level - IC4