Senior Software Engineer, Network Infrastructure

📋 Job Overview

At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs. Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for “Overall NLP Company of the Year.” Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here. The future of healthcare is being built right now. Come deliver this transformation.

🏢 About Commure

Commure is building the AI Operating System for healthcare, transforming how care is delivered, documented, and financed. Our platform integrates Ambient AI and Dictation, intelligent Agents, and autonomous RCM, all on a single AI-native platform connected with 60+ EHRs. Trusted by 500,000+ clinicians across 500+ healthcare organizations, we handle $25B+ in annual claims and support over 200 million patient interactions. With a $7B valuation and recognition on the Fortune Future 50 list and the 2026 AI Breakthrough Awards, we're at the forefront of healthcare innovation. We work directly with clinicians, deploy daily, and take full ownership from concept to production. Join us to build the future of healthcare.

🎯 The Role

We're hiring a Senior Software Engineer on the Network Infrastructure team to own the networking backbone of our multi-cloud, application, and corporate infrastructure that every other engineering team at Commure relies on. This is a horizontal team supporting multi-product infrastructure, and the network layer is yours to design, build, and operate end-to-end:

• Multi-cloud network foundation and IaC
• Hybrid and on-prem connectivity
• Kubernetes and service networking
• Edge, load balancing, and DNS
• Network security and zero-trust access
• Network observability
• Network automation using GitOps

The stack today runs on public cloud (GCP, AWS, and Azure), with all infrastructure defined as code (Terraform and controller-based). Argo CD drives deployment; Helm handles application packaging; Prometheus, Grafana, and OpenTelemetry power observability. Networking is an active build-out toward cloud-native patterns (Kubernetes-native networking, eBPF, Gateway API, service mesh), and the shape of it is yours to define. This is a hands-on IC role with broad scope. You'll make architectural calls, write the code that matters most, and set the patterns other teams build on.

✅ Key Responsibilities

• Own the multi-cloud network foundation: VPC design, routing, transit hubs, IPAM and IPv6, and multi-region failover across GCP, AWS, and Azure. Managed as code with Terraform and Crossplane
• Build hybrid and on-prem connectivity: IPsec VPN, BGP, Cloud Interconnect / Direct Connect / ExpressRoute, and traffic engineering for data centers, regional hubs, and remote offices
• Design the Kubernetes networking layer: CNI (Cilium, eBPF), ingress via Gateway API and Envoy, Istio (or equivalent) service mesh, and mTLS
• Run the edge: load balancing, DNS, WAF, DDoS mitigation, and rate limiting
• Secure the network by default: firewalls, segmentation, zero-trust access, and encryption in transit. Partner with Security on policy-as-code that meets HIPAA and SOC 2
• Own network observability: flow logs, packet capture, and eBPF visibility (Hubble), wired into OpenTelemetry, Prometheus, and Grafana
• Treat the network as code: GitOps with Argo CD, pre-merge validation, and self-serve modules for product teams
• Debug the hard problems: TCP/UDP, NAT, connection tracking, asymmetric routing, MTU, and kernel networking

📌 Required Qualifications

• 6+ years of experience in cloud native networking or infrastructure engineering
• Deep expertise in network fundamentals: TCP/UDP/ICMP, BGP, IPsec, NAT, stateful firewalls, VLANs, bridges, TUN/TAP, and connection tracking
• Experience with public cloud networking (GCP, AWS, Azure)
• Experience with Kubernetes and cloud-native networking (CNI, eBPF, Gateway API, Envoy, Istio)
• Experience with Infrastructure-as-Code (Terraform, Pulumi)
• Experience designing and operating VPN and site-to-site connectivity at scale
• Experience with BGP route filtering, multi-path routing, and traffic engineering
• Experience with network security: firewalls, WAF, DDoS mitigation, segmentation, and zero-trust
• Experience with network observability and performance troubleshooting (flow logs, packet analysis, latency, packet loss)

⭐ Desirable Experience

• Experience with Cloud Interconnect (Dedicated Interconnect, Direct Connect, ExpressRoute)
• Experience with kernel network tuning and BGP route optimization
• Experience running DNS infrastructure at scale
• Experience with on-prem or hybrid environments and data center networking
• Contributions to CNCF networking projects (Cilium, Envoy, Istio)
• Experience with network automation and testing (GitOps, Batfish, containerlab)
• Experience in regulated industries with HIPAA, SOC 2, or PCI obligations

🎁 Benefits

Estimated Base Salary $180K – $230K • Offers Equity

🛂 Visa & Eligibility

Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information.