Software Dev Principal Engineer - DPI experience is a must

Job Summary

We are seeking a Principal Engineer to lead the architecture and development of Deep Packet Inspection (DPI) and SSL/TLS Decryption engines for our NGFW appliance and virtual firewall product lines. You will drive the design of high-throughput L7 inspection and threat prevention capabilities - including Anti-Virus, Anti-Spyware, IPS, Content Filtering, and Application Control - at scale across 10G-100G+ deployments.

Responsibilities

• Architect and evolve the DPI engine for multi-gigabit stream-based L7 traffic inspection on NGFW appliances.
• Lead design of the SSL/TLS decryption pipeline to enable security services inspection over encrypted traffic.
• Define integration strategy between the decryption layer and downstream security services (AV, IPS, Anti-Spyware, Content Filtering, Application Control).
• Drive hardware acceleration strategy for cryptographic and pattern-matching workloads.
• Champion security hardening practices and ensure compliance with modern cryptographic standards.
• Own architecture reviews, author technical specifications, define performance benchmarks, and mentor senior engineers.

Requirements

• 10+ years of C/C++ experience in high-performance networking, packet processing, or L7 security engines on NGFW or carrier-grade platforms.
• Strong expertise in SSL/TLS internals - TLS 1.2/1.3, PKI, certificate management, and OpenSSL/BoringSSL.
• Hands-on experience building or optimizing DPI or security service engines (AV, IPS, Content Filtering, or Application Control) on commercial NGFW platforms.
• Proficiency in multi-core, low-latency C/C++ programming - concurrency, memory optimization, and zero-copy techniques.
• Strong debugging and profiling skills across complex, multi-threaded networking environments.

Nice to Have

• Familiarity with NGFW security services from leading industry vendors.
• Exposure to modern encrypted protocol standards (HTTP/3, QUIC, DoH, ECH/ESNI).
• Experience with virtual or cloud firewall performance tuning.
• Hands-on with network traffic generation and testing tools (Spirent, IXIA, TRex).

#LI-DS9

#LI-Pune

#LI-Hybrid

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.