Description
About the Role
The Security team is building and enhancing a cloud platform for various network security controls and management. Our mission is to develop highly-available and performant distributed systems to provide security at the network level in public clouds, including micro segmentation, L3/4/7 DDoS prevention — spanning VMs, containers, and a wide range of compute substrates.
This is a great opportunity for ambitious engineers seeking comprehensive technical growth across four dimensions:
Distributed Systems — expertise in any of the following:
Full Software Ownership — end-to-end experience across the entire software lifecycle: design → code → unit tests → integration tests → production deployment → ongoing support
The Security team is building and enhancing a cloud platform for various network security controls and management. Our mission is to develop highly-available and performant distributed systems to provide security at the network level in public clouds, including micro segmentation, L3/4/7 DDoS prevention — spanning VMs, containers, and a wide range of compute substrates.
This is a great opportunity for ambitious engineers seeking comprehensive technical growth across four dimensions:
- Development: Architecting and building distributed systems (highly available microservices)
- Security: Access control, network security policies, packet filtering, and DDoS prevention
- Networking: Software solutions across OSI layers and devices, from physical hosts to containers
- AI: Leveraging LLMs and agentic frameworks to automate security controls, detect anomalies, and enhance threat intelligence
- Architect and implement distributed systems to deliver network-level security controls across Salesforce's public and private clouds — including network policy management, ACL enforcement, and DDoS/network protection for containers
- Develop software solutions and microservices supporting network security platforms in public clouds
- Research and implement new network security solutions for intra- and cross-datacenter network flows
- Advance and operate security scanning platforms in a full DevOps model
- Participate in Agile development practices, including daily scrums
- Drive engineering excellence through code reviews and mentoring junior team members
- 6+ years of industry experience, including:
- 4+ years in SaaS, PaaS, or IaaS software development
- 3+ years in a high-availability 24/7 environment (cloud platforms a plus)
- AI Tools: Hands-on expertise using AI tools in software development
- Network Security: Proven experience building or managing platforms for network security, including:
- Segmentation, ACLs, DPI, DDoS protection
- Software tools: iptables, IPsec, VPN, IDS
- WAF/OWASP protections
- Networking: Industry-level expertise in one or more of:
- VM and container network stacks (OpenStack Neutron, Cilium, Romana)
- Network control planes and agents (Calico, Flannel, Contiv, Contrail, OVN)
- OSI model and network traffic debugging
- Networking protocols (TCP/UDP, BGP, DNS, DHCP)
- Datacenter network architecture — NAT, VXLAN, overlay/underlay
- Programming: Proficiency in OOP and multi-threaded programming in at least one of: Golang, Java, C++, Python
- Platform Development: Proven track record designing and coding large-scale PaaS/IaaS systems for public cloud providers (AWS, Azure, GCP)
- Software Design: Expertise in systems patterns (Client-server, N-tier, Master/Slave, MVC) and API constructions (Swagger, OpenAPI)
- Operating Systems: Development and software management on Linux (CentOS, RHEL)
- Security Fundamentals: Strong knowledge of:
- Authentication/authorization frameworks (SSO, SAML, OAuth)
- Secure transport (SSL, TLS)
- Identity management (certificates, PKI)
- DevOps Mindset: Strong ownership over code — test, monitor, deploy, maintain
- Communication: Excellent oral and written communication skills
- Collaboration: Ability to prioritize team success beyond personal contributions
Distributed Systems — expertise in any of the following:
- High-performance, high-availability (99.999%) and self-recoverable systems
- Control, orchestration, and automation platforms
- RPC frameworks (Protobuf/gRPC, Thrift, Bond)
- Consensus and consistency frameworks (Paxos, Raft, strong/eventual consistency)
- Data-processing systems (Lambda architecture, Kafka, RabbitMQ, ELK)
- Storage solutions (Cassandra, MongoDB, Hadoop, Redis, Zookeeper)
Full Software Ownership — end-to-end experience across the entire software lifecycle: design → code → unit tests → integration tests → production deployment → ongoing support