Embedded Software Engineer (Network Gateway)

About Ubiquiti

At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity.

This role requires working from our Prague office at least two days per week.

Responsibilities:

Design and deliver routing, security, and connectivity features for the UniFi Gateway product line.

Work across the stack, from the Linux kernel and data plane to the networking control plane and device APIs.

Build advanced gateway capabilities across routing, SD-WAN, VPN, firewalling, traffic inspection, and identity-based networking.

Own complex networking features from architecture and implementation through deployment at UniFi scale.

Work closely with Product, Hardware, Support, and QA teams to deliver customer-facing features and fixes.

Knowledge and experience:

5+ years of software development experience.

Strong C/C++ development and debugging skills.

Strong knowledge of Linux internals and Linux networking.

Strong understanding of TCP/IP, routing, NAT, firewalling, and network security.

Experience developing gateway features such as routing, VPN, firewall, QoS, or security.

Experience debugging complex networking and system-level issues on embedded Linux.

Ability to design and discuss software at the architectural level.

Strong ownership, communication, and problem-solving skills.

Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or equivalent practical experience.

Fluent in English and Czech.

Nice to have

Experience in one or more of the following areas:

Dynamic routing: FRR, BGP, OSPF, BFD, PIM, VRF, and route leaking.

VPN/IPsec: strongSwan, IKEv2, XFRM/VTI, certificate-based authentication, NHRP/ADVPN-style dynamic overlays.

SD-WAN: SLA probing, application-aware path selection, per-flow steering, multi-WAN load balancing and failover.

Linux networking: netfilter, conntrack, nftables/iptables, traffic shaping (tc, HTB, CAKE).

Network security: DPI, IDS/IPS (Suricata, Snort), TLS inspection, and threat intelligence.

Data-plane acceleration: hardware flow offload, DPDK/VPP, XDP/eBPF, and network performance optimization.

High availability: VRRP, session synchronization, conntrackd, and clustering.

Identity-based networking: RADIUS, LDAP/AD, 802.1X, PKI, and certificate management.

Embedded Linux: Debian packaging (dpkg/apt), systemd, BSP, and Linux device driver development.

Benefits​:

Competitive salary, 5 weeks of vacation per year.

Discretionary bonuses based on individual performance.

Flexible working hours, home office.

Access to all the latest Ubiquiti products and prototypes for home use and testing.

Team building activities.

Generous budget to select your work station according to your preferences.

Top floor office with terrace near Anděl with an amazing view of Prague.

Kitchen packed with food, snacks & sodas, meal allowance.

A collective of developers who want to build the best product. Maximum effort to keep processes to a minimum - no unnecessary bureaucracy, complex reporting, or similar overhead.