Responsibilities

Architect and evolve a multi-gigabit, stream-based Layer 7 DPI engine for NGFW appliances.

Lead the SSL/TLS decryption pipeline for inspecting encrypted traffic with security services.

Define integration between decryption and Anti-Virus, IPS, Anti-Spyware, Content Filtering, and Application Control engines.

Drive hardware acceleration for cryptographic and pattern-matching workloads.

Champion security hardening and compliance with modern cryptographic standards.

Own architecture reviews, technical specifications, performance benchmarks, and mentorship of senior engineers.

Requirements

- 10+ years of C/C++ experience in high-performance networking, packet processing, or L7 security engines on NGFW or carrier-grade platforms.
- Robust expertise in SSL/TLS internals, including TLS 1.2/1.3, PKI, certificate management, and OpenSSL/BoringSSL.




- Hands-on experience building or optimizing DPI or security service engines on commercial NGFW platforms.
- Proficiency in multi-core, low-latency C/C++ programming, including concurrency, memory optimization, and zero-copy techniques.
- Strong debugging and profiling skills in complex, multi-threaded networking environments.
- Familiarity with NGFW security services from leading vendors is preferred.
- Exposure to QUIC, DoH, and ECH/ESNI is preferred.
- Experience tuning virtual or cloud firewall performance is preferred.
- Hands-on experience with Spirent, IXIA, or TRex is preferred.

Benefits

Hybrid work arrangement in Pune.

Equal opportunity employment in a diverse work environment.

📌 Principal Software Engineer Hybrid (Pune)
🏢 SonicWall
📍 Pune