Who We Are: 

Roblox is reimagining the way people come together to connect, create, and express themselves. To support our massive scale, we are powered by thousands of microservices. The Application Networking team connects and secures these services, building ingress gateways, managing the service mesh, and enabling seamless communication across Roblox’s hybrid on-prem and cloud infrastructure.

We are executing on Cloud Bursting, a strategic initiative to enable Roblox’s core services to transparently burst from on-prem data centers to the cloud, allowing us to handle historical peak concurrent players and survive regional failures. You will join our Application Gateway team to build the networking infrastructure that makes this possible.

You Will:

• Design, build, and operate Roblox's Envoy-based application gateway fleet — the front door for billions of daily requests — owning L7 routing, authentication, rate limiting, and traffic policy end to end.
• Own the reliability and scale characteristics of the gateway: capacity and headroom modeling, failure isolation and blast-radius reduction, progressive delivery of config and code changes, and measurable reduction in edge-caused incidents.
• Partner with the internal networking and service teams to deliver one coherent traffic story from client to service, abstracting cluster and regional boundaries away from application developers.
• Serve as a primary escalation point for complex edge and gateway issues, debugging across Envoy configuration and internals, xDS control plane behavior, TLS termination, and the underlying network and load-balancing stack.
• Act as a senior voice on the team, mentoring junior engineers and promoting best practices in testing, deployment, and reliability engineering.

You Are: 

• A professional with 3+ years of experience in distributed systems, with strong expertise in networking architecture and technologies (Envoy, Kubernetes). You understand the tradeoffs of sidecar-based microservice architectures at scale.
• Deeply knowledgeable of L7 networking concepts: routing and request transformation, TLS termination and certificate management, authentication and authorization, rate limiting, and load-balancing.
• Experienced running Kubernetes in production and familiar with the K8s networking model.
• Comfortable working with Envoy proxy internals, xDS APIs, and control plane architectures.
• Excellent at designing large-scale distributed systems that span multiple clusters, regions, and runtime environments.
• Fluent in Go, C/C++, or Rust.
• Experienced with on-call rotations and approach infrastructure with a “reliability-first” mindset.