Architect, Software Development (Layer 7 Security & Proxy)

Description

The company makes a cloud security platform, the Zero Trust Exchange, that connects users, devices and applications wherever they are. It runs from over 200 public data centers worldwide plus thousands of private edge sites, and is described as the largest in-line cloud security platform in the world.

The company is building an AI-native organization where people are supported by machine intelligence to tackle hard security problems. Its values are ownership and collaboration, trust built through outcomes and impact, and a culture that welcomes challenge and ongoing feedback.

This architect role leads technical design for the ZIA proxy, with a focus on advanced Layer 7 protocols and SSL inspection. The role reports to the Director, Software Development Engineering in the Zero Trust Exchange department and is hybrid, requiring at least 3 days a week in the Santa Clara, CA office.

The goal is to raise the quality of code shipped to production through sound architecture, new solutions and a higher engineering bar. You will also modernize the ZIA code base by paying down technical debt, fixing known issues and rewriting components where needed, so key proxy roadmap features ship on a solid, scalable base.

Responsibilities

• Define and evolve the ZIA proxy architecture.
• Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture in ZIA.
• Work with Product Management and engineers on solution design, trade-offs and delivery of core ZIA features from start to finish.
• Set up reference architectures and design patterns for ZIA components and integrations.
• Lead technically, mentor others and govern architecture across virtual and product teams.

Requirements

• Comfortable working in ambiguous, changing conditions and shaping a path as you go.
• Focused on customers, with empathy for internal and external users and decisions grounded in real problems.
• Curious about hard technical problems and driven to find more secure, scalable solutions.
• Able to connect daily work to the larger goal of building for a fast-growing, global organization.
• Hold yourself and others accountable to high standards and build trust through consistent, open action.
• Foundational understanding of AI and ML, with experience using, securing or applying AI-driven solutions to improve results in your area.
• 15+ years of total experience, including proven work designing and building networking security software and public cloud infrastructure.
• Deep knowledge of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS and SSL proxies.
• Proficient in C.
• Proven record designing, tuning and troubleshooting high-throughput, low-latency network security products.
• Bachelor's degree in computer science, information technology or a related field.
• Preferred: proven use of AI technologies and workflows to produce measurable gains in operational efficiency.
• Preferred: mastery of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT and load balancing.
• Preferred: knowledge of BSD or Linux, virtualization, and DPDK or similar kernel bypass techniques.

Conditions

Hybrid role: at least 3 days a week in the Santa Clara, CA office.

Full-time position with a base pay range of $217,000 to $310,000 USD, excluding commission, bonus, equity where applicable, and benefits.

The range shown reflects the target minimum and maximum for new hires across all US locations and may be higher or lower depending on skills, experience and education.

The company follows applicable pay transparency rules.

The company offers reasonable accommodations in recruiting for candidates who are differently abled, have long-term, mental health or religious needs, are neurodivergent, or need pregnancy-related support.

Benefits

• Various health plans.
• Vacation and sick time plans.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks and more.