Sr Staff Software Engineer (Layer 7 Security & Proxy)

Zscaler•Santa Clara, CA

9d•$180,000 - $225,000•Hybrid

About The Position

Zscaler is seeking a Sr Staff Software Development Engineer to provide technical leadership for ZIA proxy architecture, with a focus on advanced Layer 7 protocols and SSL inspection. The role supports end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture, evolves ZIA proxy architecture, and helps deliver core proxy roadmap features on a strong, scalable foundation. The engineer will improve production code quality through sound architectural decisions and innovative solutions, raise the engineering bar, and modernize the ZIA code base by addressing technical debt, resolving existing issues, and rewriting components where needed. This architect role is hybrid, with at least three days per week in Zscaler’s Santa Clara, California office. It reports to the Director, Software Development Engineering, in the Zero Trust Exchange department. The role collaborates with Product Management and engineering on solution design, trade-offs, and delivery, and provides technical leadership, mentoring, and architectural governance across virtual and product teams.

Requirements

At least 8 years of total experience.
Proven experience designing and implementing networking security software and public cloud infrastructure.
Deep understanding of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS, and SSL proxies.
Proficiency in C.
Demonstrated success designing, optimizing, and troubleshooting high-throughput, low-latency network security products.
Bachelor’s degree in Computer Science, Information Technology, or a related field.
Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes in the functional domain.

Nice To Haves

Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency.
Mastery of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT, and load balancing.
Knowledge of BSD/Linux operating systems, virtualization technologies, and DPDK or similar kernel-bypass techniques.

Responsibilities

Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture in ZIA.
Define and evolve ZIA proxy architecture.
Partner with Product Management and engineering on solution design, trade-offs, and end-to-end delivery of core ZIA functionality.
Establish reference architectures and design patterns for ZIA components and integrations.
Provide technical leadership, mentoring, and architectural governance across virtual and product teams.
Improve the quality of code shipped to production through sound architectural decisions and innovative solutions.
Modernize the ZIA code base by addressing technical debt, fixing existing issues, and rewriting components where necessary.
Support and accelerate delivery of proxy roadmap features on a strong and scalable foundation.