Network Engineer / Backend Developer

2 Minutes ago • All levels • Network Engineering

Job Summary

Job Description

We are building a custom high-load and high-scale IPsec backend on AWS to support over 20,000 IKEv2 tunnels for connected vehicles with dual-modem WAN bonding and custom StrongSwan gateways, IPv6-only. We are looking for an experienced network engineer with software development skills to help us create this platform.
Must have:
  • Implementing redirector and tunnel-terminator logic for thousands of parallel IKEv2/IPsec tunnels.
  • Embedding client identity into the protocol stack
  • Writing automation around Linux networking (iptables/netfilter/XFRM), StrongSwan VICI, and AWS primitives (NLB, ENI, etc.).
  • Building observability and traceability for IPsec sessions at scale (IDi, DPD status, per-modem metrics).
Good to have:
  • Experience with building custom VPN plugins (e.g., for StrongSwan, Libreswan, or similar).
  • Kernel-space or eBPF experience.
  • Previous work on mobility protocols or embedded network stacks.
  • Familiarity with QNX or automotive telematics protocols.
  • Hands-on experience with VPP, DPDK, or packet reordering logic.
  • IPv6 edge deployment experience.
  • AWS Advanced Networking Specialty certification.
Perks:
  • Relocation options
  • Experience in an international environment
  • Cross-cultural experience
  • Feedback culture
  • Regular appraisals
  • Annual holiday - 20 or 26 days
  • Occasional leave - 1 or 2 days
  • Child care leave - 2 days or 16 hours per year
  • Absence due to force majeure - 2 days or 16 hours per year
  • Maternity Leave - 20 weeks
  • Parental Leave - 41 weeks
  • Paternity Leave - 14 days
  • Expert-led tech courses covering basic to advanced topics
  • Internal instructor-led soft skills courses
  • Comprehensive in-house self-learning resources for both soft and hard skills
  • Access to external self-learning libraries like ProQuest eBook and Udemy for Business
  • Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy
  • Custom Learning Programs: upskilling, reskilling, technical mentorship
  • Leadership Programs for Managers
  • Multisport card
  • Possibility to order Multisport card at the corporate rate for family members
  • LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.
  • One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners
  • Preferential banking offer
  • Preferential car leasing offer
  • Cafeteria program discounts for shops, cinema tickets, holiday offers
  • Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support
  • Private Healthcare Insurance with unlimited access to specialists
  • Full dental support
  • Travel Insurance
  • Possibility to add private healthcare coverage for family members at the corporate rate
  • Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer
  • Reimbursement for corrective glasses
  • Many fun social activities organized by the Luxoft team offline in your city
  • Online entertainment events for whole company and local team events
  • A workplace where you’re treated with respect within a multicultural team
  • Rotation between projects and accounts
  • New career opportunities
  • Self-Learning Library
  • CSR Projects

Job Details

Project description

We are building a custom high-load and high-scale IPsec backend on AWS to support over 20,000 IKEv2 tunnels for connected vehicles with dual-modem WAN bonding and custom StrongSwan gateways, IPv6-only. We are looking for an experienced network engineer with software development skills to help us create this platform.

Responsibilities

  • Implementing redirector and tunnel-terminator logic for thousands of parallel IKEv2/IPsec tunnels. Designing control-plane logic that can steer per-vehicle traffic over dual-modem tunnels with dynamic source IPs.
  • Embedding client identity into the protocol stack
  • Writing automation around Linux networking (iptables/netfilter/XFRM), StrongSwan VICI, and AWS primitives (NLB, ENI, etc.). Writing plugins or extensions for StrongSwan or the Linux IPsec stack if needed.
  • Building observability and traceability for IPsec sessions at scale (IDi, DPD status, per-modem metrics). Debugging packet flows and helping design testable redirect and failover scenarios.

Skills

Must have

  • Deep understanding of the Linux networking stack, including iptables, XFRM/IPsec, netfilter, and conntrack.
  • Experience configuring StrongSwan (IKEv2, CHILD_SA lifecycles, MOBIKE, VICI).
  • Solid AWS knowledge at the level of the Advanced Networking Specialty certification or equivalent real-world experience. Able to reason about flow consistency through NLB, GWLB, and EC2 fleet mechanics.
  • Capable of developing code.
  • Comfortable reading packet traces (tcpdump, Wireshark) and analyzing kernel-level behavior.

Nice to have

  • Experience with building custom VPN plugins (e.g., for StrongSwan, Libreswan, or similar).
  • Kernel-space or eBPF experience.
  • Previous work on mobility protocols or embedded network stacks.
  • Familiarity with QNX or automotive telematics protocols.
  • Hands-on experience with VPP, DPDK, or packet reordering logic.
  • IPv6 edge deployment experience.
  • AWS Advanced Networking Specialty certification.

Other

Languages

English: C2 Proficient

Seniority

Senior

Luxoft Benefits*

Global Relocation

  • Relocation options **
  • Experience in an international environment
  • Cross-cultural experience

Recognition and Evaluation

  • Feedback culture
  • Regular appraisals

Time Off***

  • Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority
  • Occasional leave - 1 or 2 days/ depending on the circumstances
  • Child care leave - 2 days or 16 hours per year
  • Absence due to force majeure - 2 days or 16 hours per year
  • Maternity Leave - 20 weeks
  • Parental Leave - 41 weeks
  • Paternity Leave - 14 days

Luxoft Training Center

  • Expert-led tech courses covering basic to advanced topics
  • Internal instructor-led soft skills courses
  • Comprehensive in-house self-learning resources for both soft and hard skills
  • Access to external self-learning libraries like ProQuest eBook and Udemy for Business
  • Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy
  • Custom Learning Programs: upskilling, reskilling, technical mentorship
  • Leadership Programs for Managers

Well-being and Work-life Balance

  • Multisport card
  • Possibility to order Multisport card at the corporate rate for family members
  • LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.
  • One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners
  • Preferential banking offer
  • Preferential car leasing offer
  • Cafeteria program discounts for shops, cinema tickets, holiday offers
  • Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support

Health Care

  • Private Healthcare Insurance with unlimited access to specialists
  • Full dental support
  • Travel Insurance
  • Possibility to add private healthcare coverage for family members at the corporate rate
  • Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer
  • Reimbursement for corrective glasses

Company Events and Friendly Environment

  • Many fun social activities organized by the Luxoft team offline in your city
  • Online entertainment events for whole company and local team events
  • A workplace where you’re treated with respect within a multicultural team

Internal Mobility

  • Rotation between projects and accounts
  • New career opportunities

Self-Learning Library

CSR Projects

*The acquisition of rights to the above benefits depends on the form of cooperation. Benefits apply to those employed under a contract of employment.

**Please note that relocation is not available for all open positions. At Luxoft Poland it is possible to work remotely only from the territory of Poland.

***Options offered by the Polish government.

Similar Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Similar Skill Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Jobs in Poland

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

Network Engineering Jobs

Looks like we're out of matches

Set up an alert and we'll send you similar jobs the moment they appear!

About The Company

Empower your future with Luxoft: Innovate, thrive and grow in a software-defined world.

Pune, Maharashtra, India (On-Site)

Tampa, Florida, United States (On-Site)

Guadalajara, Jalisco, Mexico (On-Site)

Ukraine (Remote)

Gurugram, India (On-Site)

Chennai, Tamil Nadu, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Gdańsk, Pomeranian Voivodeship, Poland (On-Site)

View All Jobs

Get notified when new jobs are added by luxsoft

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug