Forward Deployed Engineer
Listed on 2026-01-18
-
IT/Tech
Systems Engineer, Network Engineer
Though we are fully remote, this role can work from our private coworking space in NYC!
We’re hiring a Forward Deployed Engineer at Ona
Help the world’s largest engineering organizations run Ona inside their own cloud.
Reporting to our Head of Product Engineering, you’ll partner with our customers both on-site and remotely to design, debug, and optimise complex AWS and GCP network topologies so that self-hosted Ona clusters spin-up securely and perform ’ll work directly with enterprise platform teams, dive deep into routing tables and firewall rules, and turn obscure packet traces into crystal-clear, reproducible fixes. You’ll take your learning from being in the field and work with our engineering team to make our product even better, so that these issues are surfaced and solvable by our customers themselves.
Once running, you’ll use Ona Agents to solve the customer’s largest problems and advocate the customer’s name back to our product team.
Great candidates love solving problems and have a bias for building. We use Go predominantly.
Who we areFive years ago, we set out to create a world where every software engineer is instantly ready-to-code. With over 2 million users, we are now the leading platform for standardized and automated development environments. In 2024, we quadrupled enterprise revenue, signed several seven-figure contracts with F500 companies, launched our AI-first product architecture and, most importantly, discovered our authentic rhythm. In 2025, we will prepare the world to become software conductors with Ona.
We’re a talent-dense group of people who transform how software is created, working to empower every company, every team, and every individual to succeed in a software-first world. We’ve found product-market-fit and are scaling with high velocity towards repeatable go-to-market fit. We care deeply, and for many of us, building Ona is our life's work. Our operating principles are an honest representation of how we build relationships and make decisions.
We choose colleagues carefully based on merit and their authentic alignment with these principles.
If you're energized by the above, we'd love for you to apply!
Role responsibilitiesOur operating principles are a core responsibility of every role. We expect anyone that joins the team to take an active part in forming and enhancing our culture by living out these principles and holding others accountable towards them.
Role-specific responsibilities:
Own network troubleshooting for enterprise customers – lead escalations, dissect packet captures, and resolve VPC, DNS, firewall, and deep packet inspection issues that block Ona deployments
Design secure cloud network architectures – partner with customer architects to produce peerings, Private Link, Transit Gateway, or Shared VPC designs that meet zero-trust and compliance requirements
Build tooling & runbooks – create Cloud-formation templates, scripts, and docs that automate diagnostics and shorten time-to-resolution for future installs
Champion customer feedback – reproduce edge-case defects, file clear issues/PRs, create SOPs and influence Ona’s roadmap for network-related features
Act as a product champion – Suggest product changes to improve networking for our customers and directly drive and implement those changes
Partner with Solutions Engineering, Sales and Engineering – join pre and post sales workshops to de-risk network blockers and articulate Ona’s networking model to non-network stakeholders
Bias for building – If our customer’s have a problem, you will spring into action to build a solution for them, powered by Ona Agents
At the end of your first 30 days, you will have:
Completed onboarding, including Ona’s product, security, and support processes
Set up a AWS sandbox mirroring a typical customer topology (private subnets, Transit Gateway, on-prem VPN)
Set up a GCP sandbox mirroring a typical customer topology (private subnets, Transit Gateway, on-prem VPN)
Closed your first customer networking ticket independently and documented the fix in the runbook
Published an internal “Ona’s Networking 101” note summarising routing paths, service endpoints, and the most common…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).