Principal Software Development Engineer (Layer 7 Security & Proxy)
About The Position
Zscaler is seeking a Principal Software Development Engineer to provide technical leadership for the ZIA proxy architecture, with an emphasis on advanced Layer 7 protocols and SSL inspection. This architect role will improve production code quality through sound architectural decisions, innovative implementation, and higher engineering standards. The position will also modernize the ZIA code base by addressing technical debt, resolving existing issues, and rewriting components as needed, supporting delivery of proxy roadmap features on a scalable foundation. The role is hybrid, requiring at least three days per week in Zscaler’s Santa Clara, California office, and reports to the Director, Software Development Engineering in the Zero Trust Exchange department. The engineer will support end-to-end QUIC/HTTP/3, HTTP/2, and TLS/SSL proxy architecture; evolve ZIA architecture; partner with Product Management and engineering on solution design and delivery; establish reference architectures and design patterns; and provide technical leadership, mentoring, and architectural governance across teams.
Requirements
- At least 12 years of total experience.
- Proven experience designing and implementing networking security software and public cloud infrastructure.
- Deep understanding of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS, and SSL proxies.
- Proficiency in C.
- Demonstrated success designing, optimizing, and troubleshooting high-throughput, low-latency network security products.
- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within the functional domain.
Nice To Haves
- Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency.
- Mastery of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT, and load balancing.
- Knowledge of BSD/Linux operating systems, virtualization technologies, and DPDK or similar kernel-bypass techniques.
Responsibilities
- Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture in ZIA.
- Define and evolve ZIA proxy architecture.
- Partner with Product Management and engineering on solution design, trade-offs, and end-to-end delivery of core ZIA functionality.
- Establish reference architectures and design patterns for ZIA components and integrations.
- Provide technical leadership, mentoring, and architectural governance across virtual and product teams.
- Improve production code quality through sound architectural decisions and innovative solutions.
- Modernize the ZIA code base by addressing technical debt, fixing existing issues, and rewriting components where necessary.
- Support and accelerate delivery of proxy roadmap features on a strong, scalable foundation.
Benefits
- Various health plans.
- Time off plans for vacation and sick time.
- Parental leave options.
- Retirement options.
- Education reimbursement.
- In-office perks.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
