Software Engineer II/III/Senior, Gateway

We own ngrok’s core gateway layer — the infrastructure that sits between the internet and everything our customers run.

Every request, response, retry, and timeout passes through here.

Our job is to make sure that traffic is:

• Routed exactly where it’s supposed to go
• Secured correctly, every time
• Allowed or blocked for reasons we can explain
• Rate-limited and shaped without surprises
• Observable when something inevitably goes sideways

• Build and operate the gateway core: You’ll work on the services every ngrok request passes through. They’re very fast, very hot, and have extremely high standards.
• Design routing and security primitives everyone depends on: You’ll build low-level policy, routing, and validation systems used across the platform—making sure bad configs fail fast and don’t accidentally DDoS the internet.
• Debug distributed systems in the wild: You’ll chase bugs caused by timing, load, and incorrect assumptions. Expect metrics, traces, packet captures, and the occasional “how is this even possible?”
• Ship infrastructure people sleep on (in a good way): You’ll build simple, durable systems and clean abstractions that other teams rely on daily—while thinking about blast radius, safety, and rollbacks more than flashy demos.

• You’re comfortable in Go, Rust, C/C++, or Java (bonus points for Go)
• You’ve built networking, proxy, or infrastructure systems in production
• You understand TLS/mTLS
• You enjoy systems that are invisible until they’re not
• You passionate about building primitives other teams depend on
• You’ve said “this needs to be rock solid” and meant it literally

Extra credit if you’ve worked on:

• Gateways, proxies, or edge platforms
• Security-critical infrastructure
• Multi-tenant networking systems
• Config-heavy systems that must never surprise users
• Anything described as “simple” in the original proposal

ngrok runs entirely on AWS. Engineers develop by SSH’ing into remote EC2 environments that run a full Kubernetes cluster of the ngrok stack, closely mirroring production. The codebase is primarily Go and TypeScript. We use Postgres for persistence, Kafka for streaming, Protobuf for service boundaries, and Kubernetes, Terraform, Helm, and Buildkite to operate and ship reliably. React is used for user interfaces, and GitHub supports our development workflows and remembers everything.

This is a remote position for candidates outside of the Bay Area and a hybrid role for candidates within commuting distance to San Francisco. Our Bay Area employees commute to the office on Tuesdays and Wednesdays.

All candidates must be US-based, and legally authorized to work in the United States.

At this time, ngrok is unable to provide visa sponsorship for this position. Applicants must be authorized to work in the United States on a permanent, ongoing basis without the need for current or future sponsorship.

Senior Software Engineer

• Tier 1 (SF, LA, Seattle, NYC): $202,500 – $247,500
• Tier 2 (rest of US): $186,300 – $227,700

Software Engineer III

• Tier 1 (SF, LA, Seattle, NYC): $180,000 – $220,000
• Tier 2 (rest of US): $165,600 – $202,400

Software Engineer II

• Tier 1 (SF, LA, Seattle, NYC): $148,500 – $181,500
• Tier 2 (rest of US): $136,600 – $166,900

Job level and actual compensation will be evaluated based on factors including, but not limited to, qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), internal equity with other team members, market data, and specific work location. We provide an attractive mix of salary and equity.

#LI-Remote