Staff Software Engineer - Traffic

We’re looking for a Staff Software Engineer to join Procore’s Traffic team within Developer Acceleration. In this role, you’ll design and write the services, control planes, and self-service tooling that power the API gateways, service mesh, CDN, and ingress/egress layer sitting in front of nearly every request Procore serves. You will set technical direction for critical initiatives, including our migration from legacy API gateway technology to cloud-native alternatives like Envoy Gateway, and lead that work by shipping production code.

As a Staff Software Engineer, you’ll partner with Engineering Management, Security, and peer Developer Acceleration teams to make sure our traffic layer meets the reliability, security, and compliance bar that Procore's global customer base depends on. Use your strong software engineering foundation, Kubernetes ecosystem mastery, and AI literacy to raise the engineering bar through design and code review, ship production code, and mentor engineers across a globally distributed team. If you want to treat infrastructure as a software product and build highly reliable tools that product teams can use seamlessly—apply today!

This position reports into the Senior Engineering Manager, Traffic and will be based in our Cairo, Egypt office. We’re looking for someone to join us immediately.

What you’ll do:

• AI is central to how we work. You’ll be expected to master generative tools and agentic workflows, moving beyond just using AI to actively building the agentic future of construction
• Set technical direction for Traffic initiatives by authoring design documents and ADRs that weigh trade-offs, build-vs-buy decisions, and migration strategy toward modern, cloud-native gateway and mesh technologies.
• Design, build, and own production services in Go and TypeScript, including control-plane APIs, Kubernetes operators and controllers, admission webhooks, and automation that manage routing, rate limiting, authentication policy, and certificate lifecycle at scale.
• Build self-service developer experiences end to end: the APIs, CLIs, and automation that let product teams onboard routes, manage domains, and inspect their traffic without waiting on the Traffic team.
• Design and maintain scalable ingress/egress infrastructure, including API gateways, service mesh, CDN/edge compute, mTLS, and DNS, expressed as tested, reviewed code rather than hand-managed configuration.
• Raise the software engineering bar by owning the team's testing strategy, CI/CD quality gates, progressive delivery practices, and code review standards.
• Partner with Security and compliance-focused teams to translate control requirements into automated, enforceable implementations such as policy-as-code, identity-aware routing, and cryptographic standards.
• Leverage AI-assisted development tools and agentic workflows to accelerate delivery, automate routine tasks, and improve code quality across the team.
• Mentor and develop teammates through design reviews, code reviews, pairing, and training, actively growing a distributed engineering team across time zones.
• Serve as an escalation point during incidents, troubleshooting complex production issues across services and infrastructure, and driving durable engineering fixes rather than manual workarounds.
• Build and maintain documentation and runbooks so operational knowledge scales with the team.

What we’re looking for:

• Bachelor's degree or equivalent practical experience.
• 8+ years of professional software engineering experience, including 5+ years designing, building, and operating backend services or platform software in production, with a proven track record of technical leadership.
• Expert-level proficiency in Go or TypeScript, with working proficiency in a second language, alongside strong fundamentals in data structures, concurrency, API design, and software design patterns.
• Proven ability to own a feature from design through production, including the backend service, data model, API, and the internal customer tooling.
• Hands-on experience with unit, integration, and contract testing; CI/CD pipelines; feature flags; and instrumenting services for observability.
• Production experience managing high-throughput ingress/egress, traffic routing, and container network interfaces at scale using tools such as Envoy Proxy/Gateway, Istio, Kong, and Cloudflare.
• Extensive experience architecting, operating, and hardening Kubernetes clusters, including policy enforcement (e.g., OPA/Gatekeeper, Kyverno) and secure secrets management.
• Strong understanding of DNS, TLS/mTLS, ingress/egress networking, and cloud networking fundamentals.
• An AI-first development mindset with proficiency leveraging AI tools to accelerate the software development lifecycle.
• A systems thinker with exceptional communication skills who enjoys the complexity of distributed systems, can turn ambiguous requirements into clear technical direction, and collaborate across time zones.
• Experience building Kubernetes operators, extending Envoy, building web UIs/plugins for internal developer portals, or edge compute development. Preferred Skills
• Familiarity with identity federation, secrets management platforms in FIPS mode, and STIG application or CIS benchmark enforcement at scale. Preferred Skills
• Security certifications such as CKS or AWS Certified Security – Specialty are highly valued.

• Leadership: Demonstrated experience mentoring engineers and up-leveling the technical discourse of a team.