Staff Networking Platform Engineer, Infrastructure at Groq in Dallas, TX

Job description

Mission We’re looking for a network engineer with deep data center and Kubernetes networking experience to own networking across GroqMetal’s management plane and tenant clusters. You will own network architecture, configuration, security, and production operations—from host and cluster networking through data center fabrics to edge peering and interconnects. You’ll manage changes through fabric managers, automation, and GitOps, backed by a detailed understanding of the protocols, packet paths, and failure behavior underneath them. You’ll turn customer connectivity, isolation, and performance requirements into managed platform capabilities. Success means customers can provision and use networking reliably, tenant boundaries are demonstrably enforced, and network changes and failures can be diagnosed and resolved without reconstructing the system by hand. Responsibilities & opportunities in this role Networking product capabilities: Translate customer connectivity, isolation, access, and performance requirements into supported platform features. Define how those features are requested, provisioned, changed, observed, and removed throughout their lifecycle. Tenant and node network lifecycle: Build Kubernetes-native automation to create, modify, and remove tenant networks and manage node membership through provisioning, scaling, repair, replacement, and reassignment. Verify isolation and connectivity at each transition, recover safely from partial failures, and remove stale configuration before resources are reassigned. Data center routing and connectivity: Own dynamic configuration of tenant networks, BGP, routing policy, VLANs, and overlays across management, tenant, and external networks. Build Kubernetes-native automation to provision and manage these capabilities through fabric-manager APIs, including customer service exposure, ingress/egress, VIPs, load balancers, and public IPs. Validate convergence, failover, reachability, and isolation. Kubernetes networking: Own networking for the Groq management plane and tenant clusters, including Cilium, network policy, service routing, ingress, egress, and integration with bare-metal networks. GPU networking: Automate tenant configuration and lifecycle operations for GPU networking, including NVL72 systems, InfiniBand, RoCE, and GPUDirect, through supported platform and fabric-management interfaces. Validate connectivity, isolation, and performance as tenant allocations and node membership change. Addressing and fabric integration: Own dynamic address allocation, network inventory integration, and tenant network configuration through IPAM, NetBox, and fabric-manager APIs such as Netris and UFM. Keep intended configuration, applied state, and inventory consistent throughout the tenant and node lifecycle. Tenant isolation and network security: Own segmentation and traffic policy across the Groq management plane, tenant clusters, and physical fabrics. Define permitted communication between environments and verify isolation through provisioning, scaling, maintenance, and hardware reassignment. Work with security engineering on network access controls and hardening requirements. Network standards and configuration lifecycle: Establish addressing, routing, and configuration standards for GroqMetal’s management plane and tenant networks. Implement declarative configuration and continuous reconciliation through Kubernetes-native controllers, fabric-manager APIs, and GitOps, with code review, automated testing and validation, staged rollout, and recovery procedures. Detect and reconcile configuration drift, and maintain tenant isolation as nodes enter, leave, or return to tenant networks during provisioning, repair, and reassignment. Production network reliability: Own network telemetry, troubleshooting, and incident remediation. Diagnose packet loss, routing failures, congestion, and unexpected traffic across hosts, clusters, fabrics, and the edge. Turn recurring incidents and performance fi