Principal Engineer Software (Network Securitiy/SASE) - NetSec

Job Summary

As a Principal Engineer in our SASE group, you will be a key leader in designing, developing, and delivering next-generation technologies for our SD-WAN team. You will be part of a world-class engineering team working on groundbreaking technologies and solving complex problems. We are seeking a passionate leader who takes ownership, brings new ideas to software development, and thrives in a collaborative, fast-paced environment.

The Team

Engineering - Our Engineering team is at the core of our products and solutions, building the next-generation technologies that protect our digital way of life. We thrive on innovation and complex problem-solving, collaborating across teams to deliver highly scalable, secure, and performant systems.

Key Responsibilities

• Implement URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers for secure Direct Internet Access.
• Work with 802.1X, RADIUS/TACACS+, and Identity Providers (IdPs) for authentication.
• Manage IPsec tunnels and public key infrastructure (PKI).
• Wrap and parse packets for VXLAN, GENEVE, GRE, and IPsec.
• Perform Deep Packet Inspection (DPI) including stream reassembly and Layer 7 Application Identification (AppID).
• Design, develop, and implement highly scalable software features for our SD-WAN solution.
• Architect and implement large-scale distributed systems, ensuring high availability and performance.
• Lead database design and implementation for custom use cases, including graph, time-series, and in-memory databases.
• Proactively collaborate with development and quality assurance teams to achieve the best product quality.
• Work closely with DevOps and Technical Support teams to troubleshoot and resolve complex customer issues.
• Suggest and implement improvements to the software development lifecycle and team processes.
• Mentor and coach junior team members, fostering a culture of technical excellence and applied learning.

Qualifications

Required Qualifications

• M.E./B.E. degree in Computer Science/Engineering or equivalent experience.
• 9+ years of professional software development experience.
• Experience implementing URL filtering, anti-malware, SSL/TLS decryption, and Cloud Access Security Brokers.
• Experience working with 802.1X, RADIUS/TACACS+, and Identity Providers (IdPs) for authentication.
• Experience managing IPsec tunnels and public key infrastructure (PKI).
• Proficiency in packet wrapping and parsing for VXLAN, GENEVE, GRE, and IPsec.
• Experience with Deep Packet Inspection (DPI), stream reassembly, and Layer 7 Application Identification.
• Extensive hands-on programming skills in C/C++, Python, and Go.
• Expertise in control plane, data plane, and security features of SD-WAN platforms, including multi-core/multi-process programming.
• Deep knowledge of Layer 2/3 networking and routing protocols such as BGP, OSPF, IPSec, QoS, and NAT.

Preferred Qualifications

• Experience with DPDK for high-performance network packet processing.
• Familiarity with machine learning concepts and their application.
• Experience with cloud platforms (AWS, Azure, GCE, Kubernetes) and virtualization technologies (ESXi, KVM, Hyper-V).
• Knowledge of application layer protocols (e.g., HTTP, SMTP, SIP) and TLS/SSL internals.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.