Sr Staff Software Engineer (Layer 7 Security & Proxy)

Zscaler•Santa Clara, CA

10d•$180,000 - $225,000•Hybrid

About The Position

Zscaler is hiring a Sr Staff Software Development Engineer to provide technical leadership for the ZIA proxy architecture, with a focus on advanced Layer 7 protocols and SSL inspection. This hybrid role requires working at least three days per week in the Santa Clara, California office and reports to the Director, Software Development Engineering in the Zero Trust Exchange department. The role is responsible for shaping and evolving proxy architecture, making sound architectural decisions, implementing solutions, and raising code quality and engineering standards. It will also help modernize the ZIA code base by addressing technical debt, resolving existing issues, and rewriting components where needed, supporting delivery of proxy roadmap features on a scalable foundation. Zscaler describes its mission as securing digital transformation through the Zero Trust Exchange platform and emphasizes an AI-native approach, customer focus, ownership and collaboration, trust through outcomes, and ongoing feedback.

Requirements

Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within the functional domain.
At least 8 years of total experience, with proven experience designing and implementing networking security software and public cloud infrastructure.
Deep understanding of proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS, and SSL proxies.
Proficiency in C.
Demonstrated success designing, optimizing, and troubleshooting high-throughput, low-latency network security products.
Bachelor’s degree in Computer Science, Information Technology, or a related field.

Nice To Haves

Proven ability to leverage AI technologies and workflows to drive measurable operational efficiency.
Mastery of TCP/IP, DNS, HTTP(S), VPN technologies (IPSec, SSL VPN), NAT, and load balancing.
Knowledge of BSD/Linux operating systems, virtualization technologies, and DPDK or similar kernel bypass techniques.

Responsibilities

Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture in ZIA.
Define and evolve ZIA proxy architecture.
Partner with Product Management and engineering on solution design, trade-offs, and end-to-end delivery of core ZIA functionality.
Establish reference architectures and design patterns for ZIA components and integrations.
Provide technical leadership, mentoring, and architectural governance across virtual and product teams.
Improve production code quality through sound architectural decisions and innovative solutions.
Modernize the ZIA code base by addressing technical debt, fixing existing issues, and rewriting components where necessary.
Support and accelerate delivery of proxy roadmap features on a strong, scalable foundation.