Principal Software Development Engineer (Layer 7 Security & Proxy)

Zscaler•Santa Clara, CA

9d•Hybrid

About The Position

Zscaler is seeking a Principal Software Development Engineer to provide technical leadership for ZIA proxy architecture, focusing on advanced Layer 7 protocols and SSL inspection. The role supports end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture, evolves ZIA proxy architecture, and partners with Product Management and engineering on solution design, trade-offs, and delivery of core functionality. The engineer will establish reference architectures and design patterns, provide technical leadership and mentoring across virtual and product teams, and strengthen architectural governance. The role also modernizes the ZIA code base by addressing technical debt, fixing existing issues, and rewriting components where needed to support key proxy roadmap features on a scalable foundation. This is a hybrid position requiring at least three days per week in the Santa Clara, California office, reporting to the Director, Software Development Engineering in the Zero Trust Exchange department.

Requirements

12 or more years of total experience, including proven experience designing and implementing networking security software and public cloud infrastructure.
Deep understanding of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS, and SSL proxies.
Proficiency in C.
Demonstrated success designing, optimizing, and troubleshooting high-throughput, low-latency network security products.
Bachelor’s degree in Computer Science, Information Technology, or a related field.
Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within the functional domain.

Nice To Haves

Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency.
Mastery of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT, and load balancing.
Knowledge of BSD/Linux operating systems, virtualization technologies, and DPDK or similar kernel-bypass techniques.

Responsibilities

Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture in ZIA.
Define and evolve ZIA proxy architecture.
Partner with Product Management and engineering on solution design, trade-offs, and end-to-end delivery of core ZIA functionality.
Establish reference architectures and design patterns for ZIA components and integrations.
Provide technical leadership, mentoring, and architectural governance across virtual and product teams.
Improve the quality of code shipped to production through sound architectural decisions and innovative solutions.
Modernize the ZIA code base by addressing technical debt, fixing existing issues, and rewriting components where necessary.