Principal Software Development Engineer (Layer 7 Security & Proxy)

Description

The company builds a cloud security platform that securely connects users, devices and applications in any location, protecting thousands of customers from cyberattacks and data loss. Its SASE-based network runs from more than 200 public data centers worldwide plus thousands of edge sites, making it the largest in-line cloud security platform of its kind.

The company is moving toward an AI-native way of working, where people use machine intelligence to tackle hard security problems. Its three core behaviors are ownership with collaboration, trust built through outcomes and impact, and a challenge culture with ongoing feedback.

This hybrid role sits in the Zero Trust Exchange department and reports to the Director, Software Development Engineering.

As the architect for the ZIA proxy, you will focus on advanced Layer 7 protocols and SSL inspection. You will raise code quality and the engineering bar, and help modernize the ZIA codebase by reducing technical debt, fixing existing problems and rewriting components where needed. The work supports delivering key proxy roadmap features on a scalable foundation.

Responsibilities

• Shape the architecture for QUIC/HTTP/3 and HTTP/2 proxying and TLS/SSL handling across ZIA, from design through delivery.
• Define and evolve the architecture of the ZIA proxy over time.
• Work with Product Management and engineers on solution design, weighing trade-offs and taking core ZIA features through to delivery.
• Create reference architectures and design patterns for ZIA components and their integrations.
• Lead technically by mentoring people and governing architecture across virtual and product teams.

Requirements

• Comfortable with ambiguity, building the path as you go and treating changing conditions as material for useful work.
• Put customers first, understanding the needs of internal and external users and grounding decisions in real problems.
• Curious about hard technical challenges, always looking for more secure and scalable solutions.
• Think at scale, linking daily work to the wider goal of serving a fast-growing global organization.
• Act with integrity by holding yourself and others to strict accountability and building trust through consistent, open action.
• Foundational knowledge of AI and ML, with experience using, securing or applying AI-driven solutions to improve results in your area.
• 12+ years of total experience, including proven work designing and building network security software and public cloud infrastructure.
• Solid understanding of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS and SSL proxies.
• Strong skills in the C language.
• A record of designing, tuning and troubleshooting high-throughput, low-latency network security products.
• Bachelor's degree in computer science, information technology or a related field.
• Preferred: proven use of AI technologies and workflows to achieve measurable operational efficiency.
• Preferred: strong command of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT and load balancing.
• Preferred: knowledge of BSD or Linux operating systems, virtualization, and DPDK or similar kernel bypass techniques.

Conditions

Full-time, hybrid position requiring at least 3 days a week in the Santa Clara, CA office.

Base pay is $212,000 to $265,000 USD. This is the target range for new hires across all US locations and may be higher or lower depending on skills, experience, and education or training. It excludes commission, bonus, equity where applicable, and benefits.

The company complies with applicable pay transparency rules.

Reasonable accommodations are available during recruiting for candidates who are differently abled, have long-term or mental health conditions, hold sincerely held religious beliefs, are neurodivergent, or need pregnancy-related support.

Benefits

• Multiple health plan options.
• Vacation and sick time off.
• Parental leave.
• Retirement plans.
• Education reimbursement.
• In-office perks and more.