Software Dev Principal Engineer - DPI & SSL/TLS Security

About the Role

We are seeking a Principal Engineer to lead the architecture and development of Deep Packet Inspection (DPI) and SSL/TLS Decryption engines for our NGFW appliance and virtual firewall product lines. You will drive the design of high-throughput L7 inspection and threat prevention capabilities — including Anti-Virus, Anti-Spyware, IPS, Content Filtering, and Application Control — at scale across 10G–100G+ deployments.

Responsibilities

• Architect and evolve the DPI engine for multi-gigabit stream-based L7 traffic inspection on NGFW appliances.
• Lead design of the SSL/TLS decryption pipeline to enable security services inspection over encrypted traffic.
• Define integration strategy between the decryption layer and downstream security services (AV, IPS, Anti-Spyware, Content Filtering, Application Control).
• Drive hardware acceleration strategy for cryptographic and pattern-matching workloads.
• Champion security hardening practices and ensure compliance with modern cryptographic standards.
• Own architecture reviews, author technical specifications, define performance benchmarks, and mentor senior engineers.

Requirements

• 10+ years of C/C++ experience in high-performance networking, packet processing, or L7 security engines on NGFW or carrier-grade platforms.
• Strong expertise in SSL/TLS internals — TLS 1.2/1.3, PKI, certificate management, and OpenSSL/BoringSSL.
• Hands-on experience building or optimizing DPI or security service engines (AV, IPS, Content Filtering, or Application Control) on commercial NGFW platforms.
• Proficiency in multi-core, low-latency C/C++ programming — concurrency, memory optimization, and zero-copy techniques.
• Strong debugging and profiling skills across complex, multi-threaded networking environments.

Nice to Have

• Familiarity with NGFW security services from leading industry vendors.
• Exposure to modern encrypted protocol standards (HTTP/3, QUIC, DoH, ECH/ESNI).
• Experience with virtual or cloud firewall performance tuning.
• Hands-on with network traffic generation and testing tools (Spirent, IXIA, TRex).

#LI-DS9

#LI-Pune

#LI-Hybrid