Principal Engineer Software - NGFW (NetSec) - Bangalore

Job Summary

Engineering - Our engineering team is at the core of our products and connected directly to the mission of preventing cyberattacks. We are constantly innovating - challenging the way we, and the industry, think about cybersecurity. Our engineers don t shy away from building products to solve problems no one has pursued before. We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

We are hiring a Principal Engineer Software to own the health, reliability, and release engineering of PA-VM, our virtualized next-generation firewall platform. In this hands-on systems-engineering role, you will debug complex issues across multiple active release trains and drive architecture reviews. You will own the cross-architecture build environment and CI/CD pipeline, mentoring engineers to raise the bar for a platform deployed in tens of thousands of global customer environments.

Key Responsibilities

• Own PA-VM platform health from UEFI boot path through Linux process supervision into firewall data-plane and HA/VPN control-plane daemons.
• Debug regressions across private and public cloud hypervisors and CPU architectures.
• Design and maintain Docker-based cross-architecture build environments for multi-format PA-VM images.
• Operate and evolve CI/CD pipelines with cherry-pick automation and hardware-in-the-loop regression gates.
• Design HA and VPN subsystem improvements for both on-prem and cloud-native environments.
• Instrument the fleet with telemetry, structured logging, automated crash-dump collection, and quality dashboards.
• Mentor engineers through complex debugging, drive architecture reviews, and run blameless post-mortems for P1 escapes.
• Partner cross-functionally with QA, Release Engineering, and Product Management to ship fixes safely.

Qualifications

• 10+ years of hands-on systems engineering on Linux-based appliances or virtualized platforms.
• Deep Linux systems expertise including boot/init flow, process supervisors, journald, cgroups, and core dumps.
• Hands-on virtualization experience across private and public cloud hypervisors like KVM, ESXi, AWS Nitro, and GCP KVM.
• Proficiency with both x86_64 and ARM64 platforms, including debugging ARM-specific regressions.
• Working knowledge of HA stateful failover and cloud-native HA patterns.
• Working knowledge of IPsec and SSL VPN protocols, including IKEv1/IKEv2 state machines and cryptographic agility.
• Proficiency in Docker-as-build-environment, including multi-arch manifests and hermetic builds.
• CI/CD proficiency across multiple release trains using Jenkins, GitLab CI, Buildkite, or GitHub Actions.
• Experience with image-format conversion and marketplace publishing automation.
• Expertise in observability for distributed appliances using tools like Prometheus, Grafana, or OpenTelemetry.
• Demonstrated Senior/Staff-level leadership in architecture review, mentorship, and driving code-quality standards.

Preferred Qualifications

• Prior experience shipping a commercial network security product such as firewall, VPN, SASE, or SD-WAN.
• Kernel programming or kernel-module experience including netfilter, XFRM, or cryptodev.
• Contributions to open-source infrastructure projects like KVM, QEMU, libvirt, or systemd.
• Experience with FIPS 140-2 or FIPS 140-3 certification processes.
• Experience operating multiple active release trains simultaneously with hot-patch or zero-downtime upgrade semantics.
• Working knowledge of GRE/VXLAN/Geneve overlays, BGP, OSPF, and modern routing stacks.
• Experience using Rust or Go for systems-level tooling, alongside C/C++ and Python.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.