Embedded Software Engineer (Network Gateway)

About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. This role requires working from our Pilsen office at least two days per week. Responsibilities: Design and deliver routing, security, and connectivity features for the UniFi Gateway product line. Work across the stack, from the Linux kernel and data plane to the networking control plane and device APIs. Build advanced gateway capabilities across routing, SD-WAN, VPN, firewalling, traffic inspection, and identity-based networking. Own complex networking features from architecture and implementation through deployment at UniFi scale. Work closely with Product, Hardware, Support, and QA teams to deliver customer-facing features and fixes. Knowledge and experience: 5+ years of software development experience. Strong C/C++ development and debugging skills. Strong knowledge of Linux internals and Linux networking. Strong understanding of TCP/IP, routing, NAT, firewalling, and network security. Experience developing gateway features such as routing, VPN, firewall, QoS, or security. Experience debugging complex networking and system-level issues on embedded Linux. Ability to design and discuss software at the architectural level. Strong ownership, communication, and problem-solving skills. Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, or equivalent practical experience. Fluent in English and Czech. Nice to have Experience in one or more of the following areas: Dynamic routing: FRR, BGP, OSPF, BFD, PIM, VRF, and route leaking. VPN/IPsec: strongSwan, IKEv2, XFRM/VTI, certificate-based authentication, NHRP/ADVPN-style dynamic overlays. SD-WAN: SLA probing, application-aware path selection, per-flow steering, multi-WAN load balancing and failover. Linux networking: netfilter, conntrack, nftables/iptables, traffic shaping (tc, HTB, CAKE). Network security: DPI, IDS/IPS (Suricata, Snort), TLS inspection, and threat intelligence. Data-plane acceleration: hardware flow offload, DPDK/VPP, XDP/eBPF, and network performance optimization. High availability: VRRP, session synchronization, conntrackd, and clustering. Identity-based networking: RADIUS, LDAP/AD, 802.1X, PKI, and certificate management. Embedded Linux: Debian packaging (dpkg/apt), systemd, BSP, and Linux device driver development. Benefits: Kitchen packed with food, snacks & sodas, meal allowance. Flexible working hours. Informal startup atmosphere filled with excitement. Team building activities. Generous budget to select your work station according to your preferences. Competitive salary and 5 weeks of vacation per year. Discretionary bonuses based on individual performance. The newest web technologies, experimenting with the newest network HW. Comfortable office in the center of Pilsen with good transport accessibility.