Principal Software Engineer SD-WAN

Description

The role is onsite, with the expectation that you will work mainly from a company office.

The company is an edge-to-cloud business that helps organizations connect, protect and analyze their data and applications across edge and cloud environments.

This is a hands-on principal position in which you set the technical direction for secure, scalable, high-performance networking products.

You will tackle hard problems in secure connectivity, advanced cryptography and large-scale packet processing, and your work will shape the future of the SD-WAN product line.

You will act as the technical lead and chief architect for the next generation of secure SD-WAN solutions.

Responsibilities

• Own the architecture, design and build of secure SD-WAN products, covering site-to-site and remote access for enterprise customers.
• Improve performance and throughput using DPDK, VPP, eBPF and hardware crypto accelerators, keeping systems reliable.
• Mentor senior engineers and lead by example in code quality, design and engineering practice.
• Work with product management, hardware and QA teams to turn business needs into sound technical solutions.
• Evaluate and adopt new security technologies, including quantum-safe cryptography, so products stay ahead of emerging threats.
• Diagnose and fix complex networking and security faults, protecting product integrity and customer trust.
• Coordinate external penetration testers and run the secure development lifecycle around their findings.
• Track CVEs and security vulnerabilities proactively and guide product teams on fixes.
• Handle customer escalations involving security and carry out threat analysis.

Requirements

• At least 10 years of software engineering experience, mostly in secure networking, embedded systems and Linux kernel work.
• Deep knowledge of IPSec and VPN technology, including the IKEv2 protocol, tunnel modes and hard troubleshooting.
• At least 5 years working with high-performance networking frameworks (DPDK, VPP, eBPF), security protocols (IPSec, TLS, SSL) and cryptographic libraries and accelerators (OpenSSL, AES, RSA, ECC, Intel QAT, AES-NI).
• Hands-on experience building with open-source networking and security tools such as StrongSwan, Libreswan, OpenVPN or WireGuard.
• Extensive hardware offload experience for cryptographic work using Intel QAT or AES-NI.
• Advanced C/C++ skills and strong background in multithreaded, system-level programming.
• A proven record of designing, leading and shipping large-scale secure networking products.
• Excellent communication, collaboration and leadership skills.
• Preferred: experience with FIPS 140-2/3 validation and Common Criteria certification for security products.
• Preferred: experience with NextGen Firewalls, Secure Web Gateways, IDS/IPS and Deep Packet Inspection (DPI).
• Preferred: experience with quantum-safe cryptography and next-generation security protocols.
• Preferred: background in SD-WAN product development for enterprise or service provider markets.

Conditions

Onsite role, with work primarily done from a company office.

Engineering function, job level TCP05.

Annual base salary in California is USD 155,500 to 315,000.

Actual offers may fall outside this range depending on location, experience, education, training and skill level.

Variable incentives may be offered in addition to base salary.

Details of US employee benefits are published online.

The company is an equal opportunity employer that makes decisions on merit and business need, and it complies with laws on arrest and conviction records.

Benefits

• Comprehensive health and wellbeing coverage covering physical, financial and emotional health.
• Career development programs for reaching professional goals, including becoming a subject expert or moving into another division.