cswork / libraryOpen practice workspace

Interview guides · Route1

Route1 Software Engineer Interview Guide

Route1 Software Engineer interview guide: reported rounds, questions and how candidates describe the process.

The 60-second brief

At Route1, a Software Engineer plays a crucial role in developing, securing, and maintaining high-performance software systems that power secure remote access and data security solutions. The company’s products operate at the intersection of enterprise networking, hardware integration, and application security. As a engineer here, your work directly impacts the integrity and reliability of communication pipelines used by government, military, and enterprise clients who demand absolute data security. The engineering team is tasked with solving complex problems involving high availability, low-latency data transmission, and robust network routing. You will work on both application-layer software and low-level system integrations.

This guide is scoped to a Software Engineer candidate at Route1.

Focus areas

  • Object-Oriented Programming (OOP)
  • Dependency Injection (DI)
  • C++ Programming

The Route1 interview process

Route1 candidates report 3 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.

Targeted Screening

Initial evaluation that may include a timed programming test or a technical phone screen covering core concepts.

What to demonstrate

  • Initial evaluation that may include a timed programming test or a technical phone screen covering core concepts
  • Depth in Object-Oriented Programming (OOP)

How to prepare

  • Answer aloud and timed: Explain the difference between method overriding and method overloading.
  • Answer aloud and timed: How does dependency injection work in the Spring framework, and what are its primary benefits?

Technical Conversation

In-depth technical discussion with the hiring manager focusing on your skills and experience.

What to demonstrate

  • In-depth technical discussion with the hiring manager focusing on your skills and experience
  • Depth in Object-Oriented Programming (OOP)

How to prepare

  • Answer aloud and timed: Describe the lifecycle of a thread in Java and how you would prevent deadlock in a multithreading environment.
  • Answer aloud and timed: What is Java Message Service (JMS), and in what scenarios would you choose to implement it?

Final Interview

Technical interview with the Chief Technology Officer (CTO) covering network infrastructure and systems architecture.

What to demonstrate

  • Technical interview with the Chief Technology Officer (CTO) covering network infrastructure and systems architecture
  • Depth in Object-Oriented Programming (OOP)

How to prepare

  • Answer aloud and timed: Explain the concepts of inheritance and polymorphism, and how they contribute to writing maintainable code.
  • Answer aloud and timed: How do you optimize a search operation through an unsorted list? What are the trade-offs of sorting it first?

Where candidates lose points

Brush up on your networking fundamentals

Do not neglect basic networking concepts. Review the OSI model, IP routing, firewall rules, and load balancing techniques, as these are highly valued across all engineering teams at Route1.

Be ready for language-specific deep dives

If you are interviewing for a Java role, review concurrency, Spring, and JMS. If you are interviewing for a C++ role, review memory management, pointers, and language-specific optimizations.

Some candidates have experienced communication delays during the scheduling and offer stages

Be proactive in following up with your recruiter or hiring manager to ensure your application moves forward smoothly and no steps are missed.

Questions & practice

Describe the lifecycle of a thread in Java and how you would prevent deadlock in a multithreading environment.

Medium · Enterprise Java & Object-Oriented Progra

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

How do you optimize a search operation through an unsorted list? What are the trade-offs of sorting it first?

Medium · Low-Level Systems & C++ Programming

Approach

  1. Restate the input: its shape, its size, and what is guaranteed about it.
  2. Name the brute-force solution and its complexity before improving on it.
  3. Choose the data structure from the access pattern, not from familiarity.
  4. State the target complexity and say which constraint rules the naive version out.

Follow-up

  • How does this change if the input no longer fits in memory?
  • What is the worst case, and how likely is it on real data?

Explain the difference between stack and heap memory allocation in C++.

Medium · Low-Level Systems & C++ Programming

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

What are smart pointers in C++, and how do they help prevent memory leaks?

Medium · Low-Level Systems & C++ Programming

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

How does virtual inheritance work, and when should it be used?

Medium · Low-Level Systems & C++ Programming

Approach

  1. Say what the runtime actually does before reasoning about the code.
  2. Name what is shared across threads and what owns each piece of state.
  3. Identify the window where an invariant is briefly untrue.
  4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

  • What happens if two callers reach this at the same time?
  • Where could this allocate more than you expect?

Keep soft-deleted accounts from blocking re-registration

Easy · soft delete · unique constraints · engine differences

app_user holds user_id, tenant_id, email CITEXT, password_hash (NULL for SSO principals), email_verified_at, auth_version, status ('invited','active','suspended','deactivated'), created_at, updated_at, deleted_at. Two live accounts for one address inside a tenant must be impossible, but an address freed by a soft delete must be reusable, and the same tenant may delete and re-register it repeatedly. Write the uniqueness DDL for PostgreSQL 16, then the equivalent for MySQL 8 where partial indexes do not exist, and say what each permits once three deleted rows already hold that address.

Approach

  1. Start from what is actually unique: not (tenant_id, email), but (tenant_id, email) among live rows. PostgreSQL says that directly — CREATE UNIQUE INDEX app_user_live_email ON app_user (tenant_id, email) WHERE deleted_at IS NULL. A full constraint over the same two columns burns the address permanently the first time someone deletes an account.
  2. Keep case-insensitivity in the type or the index, never in the application: CITEXT as given, or UNIQUE (tenant_id, lower(email)) as an expression index where the extension is unavailable. A case-sensitive unique column is exactly how two accounts for one human appear.
  3. For MySQL 8 the predicate has to move inside the key: add a discriminator column that is a constant 0 while the row is live and is set to user_id on delete, with UNIQUE (tenant_id, email, deleted_marker). Live rows share the constant and still collide; deleted rows differ from each other and stop colliding.
  4. State the NULL variant and its dependency: leaving the marker NULL for deleted rows also works, because a unique index treats NULLs as distinct — true in MySQL, and true in PostgreSQL only under the default NULLS DISTINCT, which PostgreSQL 15 lets you reverse. Check the polarity against the three existing deleted rows: constant-on-live is what preserves the collision you want, and reversing it silently admits duplicate live accounts.

Follow-up

  • A deleted account re-registers with the same address the next day. Do the old resource rows follow the new user_id, and how does the API keep the two principals apart?
  • How do you honour an erasure request while resource_revision.actor_user_id still references this table?

Write the update path that detects a concurrent edit

Medium · optimistic concurrency · transactional outbox · audit history

resource carries version INT NOT NULL DEFAULT 1. resource_revision holds revision_id, resource_id, version, actor_user_id, change_kind, patch JSONB, request_id, created_at with UNIQUE (resource_id, version). outbox_event holds aggregate_type, aggregate_id, aggregate_version, event_type, payload, status. A PUT carries the version the client read. Write the exact statements for the single transaction that applies the edit, records the revision and enqueues 'resource.updated', and give the handler's branch on zero affected rows. Then say what PostgreSQL 16 does under READ COMMITTED when two of these updates hit one row at once.

Approach

  1. One transaction, three writes, no network call inside it: UPDATE resource SET title = $3, version = version + 1, updated_at = now() WHERE resource_id = $1 AND tenant_id = $4 AND version = $2; then INSERT the resource_revision row at version $2 + 1; then INSERT the outbox_event row at the same aggregate_version. The event goes to a table rather than a broker because no transaction spans both.
  2. Branch on the affected-row count before doing anything else. Zero has three causes — stale version, wrong tenant, row gone — so re-read once and map to 409 carrying the current version, or 404 for an id outside the caller's tenant, which also stops the endpoint confirming that another tenant's id exists.
  3. State the engine behaviour instead of assuming it. Under READ COMMITTED the second UPDATE blocks on the row lock, and when the first commits PostgreSQL re-evaluates the WHERE clause against the newly committed row, so the version predicate now fails and the statement reports zero rows. Under REPEATABLE READ the identical collision raises SQLSTATE 40001 instead, so the handler must fold both shapes into one conflict response.
  4. Keep UNIQUE (resource_id, version) even though the predicate already serialises writers. It is what makes a lost update unwritable if any other path ever reaches the revision table, and it converts a logic bug into 23505 rather than into a silently missing history row.

Follow-up

  • A client sends the version it read ten minutes ago and the resource has moved three versions. What is in your 409 so it can resolve the conflict without a full re-fetch?
  • Two editors, two disjoint fields, no overlap. Does your answer still refuse the second write, and should it?

Explain the difference between method overriding and method overloading.

Medium · Enterprise Java & Object-Oriented Progra

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

How does dependency injection work in the Spring framework, and what are its primary benefits?

Medium · Enterprise Java & Object-Oriented Progra

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

What is Java Message Service (JMS), and in what scenarios would you choose to implement it?

Medium · Enterprise Java & Object-Oriented Progra

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

Explain the concepts of inheritance and polymorphism, and how they contribute to writing maintainable code.

Medium · Enterprise Java & Object-Oriented Progra

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

How does a load balancer distribute traffic, and what are the differences between Layer 4 and Layer 7 load bal

Medium · Networking & Infrastructure

How does a load balancer distribute traffic, and what are the differences between Layer 4 and Layer 7 load balancing?

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

What is the role of a firewall in securing enterprise application traffic, and how do you configure software t

Medium · Networking & Infrastructure

What is the role of a firewall in securing enterprise application traffic, and how do you configure software to respect firewall rules?

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Explain the key differences between a switch and a router in a local area network.

Medium · Networking & Infrastructure

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

How do you troubleshoot a latency issue occurring between an application server and a network router?

Medium · Networking & Infrastructure

Approach

  1. Establish what changed and when, before forming any theory.
  2. Pick a bisection that eliminates candidates whichever way it turns out.
  3. Check the instrumentation before believing the symptom.
  4. Separate the trigger from the cause; the deploy is rarely the bug.

Follow-up

  • What would you look at first, and what would it rule out?
  • How would you tell a cause from a coincidence here?

Suggested practice checklist

Built from the rounds and topics Route1 candidates report.

Day 1 — Map the Route1 loop

  • Write out the reported sequence: Targeted Screening, Technical Conversation, Final Interview.
  • For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 3 reported rounds, with the weakest marked.

Day 2 — Work Object-Oriented Programming (OOP)

  • Spend the session on Object-Oriented Programming (OOP), which Route1 candidates report being tested on.
  • Write one worked example in Object-Oriented Programming (OOP) and time yourself on it.

Deliverable: One timed worked example in Object-Oriented Programming (OOP).

Day 3 — Work Dependency Injection (DI)

  • Spend the session on Dependency Injection (DI), which Route1 candidates report being tested on.
  • Write one worked example in Dependency Injection (DI) and time yourself on it.

Deliverable: One timed worked example in Dependency Injection (DI).

Day 4 — Work C++ Programming

  • Spend the session on C++ Programming, which Route1 candidates report being tested on.
  • Write one worked example in C++ Programming and time yourself on it.

Deliverable: One timed worked example in C++ Programming.

Day 5 — Answer out loud: Enterprise Java & Object-Oriented Programming

  • Answer aloud, timed: Explain the difference between method overriding and method overloading.
  • Answer aloud, timed: How does dependency injection work in the Spring framework, and what are its primary benefits?

Deliverable: Spoken answers to 2 reported Enterprise Java & Object-Oriented Programming question(s), under time.

Day 6 — Answer out loud: Low-Level Systems & C++ Programming

  • Answer aloud, timed: How do you optimize a search operation through an unsorted list? What are the trade-offs of sorting it first?
  • Answer aloud, timed: Explain the difference between stack and heap memory allocation in C++.

Deliverable: Spoken answers to 2 reported Low-Level Systems & C++ Programming question(s), under time.

Day 7 — Answer out loud: Networking & Infrastructure

  • Answer aloud, timed: How does a load balancer distribute traffic, and what are the differences between Layer 4 and Layer 7 load balancing?
  • Answer aloud, timed: What is the role of a firewall in securing enterprise application traffic, and how do you configure software to respect firewall rules?

Deliverable: Spoken answers to 2 reported Networking & Infrastructure question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

Tell callers you do not own that their integration breaks

Medium · deprecation · compatibility · stakeholders

A field in a write endpoint's response must change shape. You own the endpoint; you do not own the four internal callers or the outbound webhook consumers who read it. Describe a deprecation you were responsible for: what you shipped first, how you established who was actually reading the field, the window you gave and what set its length, what you did about the consumer who never moved, and how you decided removal was safe. Name the signal you used, not the announcement you sent.

Approach

  1. Establish the reader set empirically rather than from a wiki of owners: per-field usage counters keyed by principal, or access logs attributed to a consumer. State the blind spot of whichever you pick, since a consumer that reads the field only on a monthly job will not appear in a week of logs.
  2. Ship additive first. Populate the new field alongside the old one so no reader is forced to move, which is also what keeps a rolling deploy safe, because old and new instances answer the same requests at the same time and a rollback must still find the old shape present.
  3. Set the window from the slowest legitimate consumer's release cadence, not from your calendar, and decide separately what to do for a consumer with no release process at all, such as an external webhook endpoint you can only email.
  4. Convert silence into evidence before you rely on it: a short, low-traffic removal window that makes a still-dependent consumer fail visibly and loudly while you are watching, rather than at three in the morning after you have moved on.

Follow-up

  • How would you detect a consumer that reads the field only during a monthly export?
  • One caller refuses to move and has a commercial relationship behind it. What changes in your plan and what does not?

Argue against a design, lose, and commit anyway

Medium · disagreement · service boundaries · decision records

Describe a design you argued against and lost. State the failure you predicted as a named mechanism, not a feeling about complexity: two services that would need one transaction, a projection with no rebuild path, a write path with no idempotency key. Say what evidence you brought, what the decision maker weighed instead, and what you did after the decision was made: what you instrumented, what you wrote down, and whether the prediction came true. Five minutes.

Approach

  1. State the prediction in falsifiable form up front: the mechanism, the condition that triggers it, and the observable outcome. A prediction that cannot be checked also cannot be credited to you later.
  2. Show the evidence you had at the time and label each piece honestly as measured, analogous, or intuition. Keeping the intuition is fine; disguising it as data is the thing that erodes your standing in the next argument.
  3. Represent the opposing case at full strength, including the constraint you did not control: a fixed date, a team boundary, or the fact that the decision was cheap to reverse and yours was not.
  4. Make disagree-and-commit concrete. Name the artefact you left behind so the prediction could be settled without you: the alert and its threshold, the counter on the dashboard, the decision note that recorded the trade-off and the condition that would revisit it.

Follow-up

  • What threshold on that alert would have proved you right, and did anyone ever look at it?
  • If the same proposal arrived tomorrow with the same deadline, would you argue it the same way?

Reverse your own decision and price the reversal

Medium · reversibility · measurement · migrations

Describe a technical decision you made and later reversed. Pick one that cost something: a service you split and merged back, a cache you added and removed, an index you created that pushed the planner onto a worse plan, a projection you rebuilt from scratch. State what you believed when you decided, the measurement that changed your mind, how long the wrong version ran in production, and what the reversal cost in migrations, dual writes, and a deprecation window for callers you did not own.

Approach

  1. State the original rationale without irony, in the version you would still defend given what was known then. If it is not defensible, the story is about carelessness rather than judgement, and a different example serves you better.
  2. Give the measurement that moved with a before and after: the p99 that did not improve, the cache hit rate that sat at 40%, the plan that flipped to a sequential scan once the table passed a size you can name.
  3. Cost the reversal in steps, not adjectives: expand-and-contract deploys, the dual-write window, the callers who had to be notified, the rows already written in the wrong shape that had to be backfilled or abandoned.
  4. Distinguish reversal from rewrite by naming what you kept. Most good reversals preserve the schema or the interface and undo one decision inside it, which is also why they were affordable.

Follow-up

  • What in that decision was irreversible, and did you know it was irreversible when you made it?
  • How did you tell the people who had already built on top of the original decision?