Principal Software Development Engineer (Layer 7 Security & Proxy)

Job Description

Principal Software Development Engineer (Layer 7 Security & Proxy) | Zscaler

The Tone:
This is a hybrid role at Zscaler, located in Santa Clara, CA. Zscaler accelerates digital transformation, protecting customers from cyberattacks and data loss through its Zero Trust Exchange platform, which is the world’s largest in-line cloud security platform. The company is building an AI-native enterprise where human potential is amplified by machine intelligence to solve security challenges. This Principal Software Development Engineer role is crucial for providing technical leadership for the ZIA proxy architecture, specifically focusing on advanced Layer 7 protocols and SSL inspection to improve code quality, modernize the codebase, and accelerate feature delivery on a strong and scalable foundation.

The TL;DR
• Role: Full Time
• Type: Full Time
• Location: Hybrid Santa Clara, CA
• Pay: $212000–$265000 yearly
• Team: Zero Trust Exchange department, reporting to the Director, Software Development Engineering
• Mission: Provide technical leadership for the ZIA proxy architecture, with a strong focus on advanced Layer 7 protocols and SSL inspection, to ensure a scalable and secure foundation.
• Tech Stack: C language, HTTP/2, QUIC, TCP/IP, TLS/DTLS, SSL proxies, BSD/Linux, DPDK

What You’ll Actually Do
• Support: Support end-to-end QUIC/HTTP/3 and HTTP/2 proxy and TLS/SSL architecture within ZIA.
• Define and Evolve: Define and evolve the ZIA proxy architecture.
• Partner: Partner with Product Management and engineering on solution design, trade-offs, and end-to-end delivery of core ZIA functionality.
• Establish: Establish reference architectures and design patterns for ZIA components and integrations.
• Provide Leadership: Provide technical leadership, mentoring, and architectural governance across virtual and product teams.

The Must-Haves
• Background: Bachelor’s degree in Computer Science, Information Technology, or a related field, coupled with a foundational understanding of AI/ML technologies.
• Experience: 12+ years of experience in designing and implementing networking security software and public clouds infrastructure.
• Skills: Deep understanding of Proxies, HTTP/2, QUIC, TCP/IP, TLS/DTLS, and SSL proxies; Proficient in C language; Demonstrated success in designing, optimizing, and troubleshooting high-throughput, low-latency network security products.
• Bonus: Mastery of TCP/IP, DNS, Http(s), VPN technologies (IPSec, SSL VPN), NAT, and load balancing; Knowledge of BSD/Linux operating systems, virtualization technologies, and DPDK or similar kernel bypass techniques; Proven ability to use AI technologies and workflows to drive measurable operational efficiency.