Embedded Software Engineer (Network Gateway)

This role requires working from our Pilsen office at least two days per week.

Responsibilities:

• Design and deliver routing, security, and connectivity features for the UniFi Gateway product line.
• Work across the stack, from the Linux kernel and data plane to the networking control plane and device APIs.
• Build advanced gateway capabilities across routing, SD-WAN, VPN, firewalling, traffic inspection, and identity-based networking.
• Own complex networking features from architecture and implementation through deployment at UniFi scale.
• Work closely with Product, Hardware, Support, and QA teams to deliver customer-facing features and fixes.

Knowledge and experience:

• 5+ years of software development experience.
• Strong C/C++ development and debugging skills.
• Strong knowledge of Linux internals and Linux networking.
• Strong understanding of TCP/IP, routing, NAT, firewalling, and network security.
• Experience developing gateway features such as routing, VPN, firewall, QoS, or security.
• Experience debugging complex networking and system-level issues on embedded Linux.
• Ability to design and discuss software at the architectural level.
• Strong ownership, communication, and problem-solving skills.
• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or equivalent practical experience.
• Fluent in English and Czech.

Nice to have

Experience in one or more of the following areas:

• Dynamic routing: FRR, BGP, OSPF, BFD, PIM, VRF, and route leaking.
• VPN/IPsec: strongSwan, IKEv2, XFRM/VTI, certificate-based authentication, NHRP/ADVPN-style dynamic overlays.
• SD-WAN: SLA probing, application-aware path selection, per-flow steering, multi-WAN load balancing and failover.
• Linux networking: netfilter, conntrack, nftables/iptables, traffic shaping (tc, HTB, CAKE).
• Network security: DPI, IDS/IPS (Suricata, Snort), TLS inspection, and threat intelligence.
• Data-plane acceleration: hardware flow offload, DPDK/VPP, XDP/eBPF, and network performance optimization.
• High availability: VRRP, session synchronization, conntrackd, and clustering.
• Identity-based networking: RADIUS, LDAP/AD, 802.1X, PKI, and certificate management.
• Embedded Linux: Debian packaging (dpkg/apt), systemd, BSP, and Linux device driver development.

Benefits:

• Kitchen packed with food, snacks & sodas, meal allowance.
• Flexible working hours.
• Informal startup atmosphere filled with excitement.
• Team building activities.
• Generous budget to select your work station according to your preferences.
• Competitive salary and 5 weeks of vacation per year.
• Discretionary bonuses based on individual performance.
• The newest web technologies, experimenting with the newest network HW.
• Comfortable office in the center of Pilsen with good transport accessibility.