Job description
Description
We’re seeking a Senior Software Engineer to help build and evolve the Gateway, the edge enforcement and routing component of our AI-driven Zero Trust Network Access (ZTNA) platform.
The Gateway is central to the architecture, responsible for real-time policy enforcement, DNS aliasing, and risk-aware access control across multi-tenant environments.
You’ll design and develop secure, high-performance, distributed systems that make the overlay network resilient, intelligent, and autonomous — whether deployed on-prem, in the cloud, or at the edge.
Responsibilities
Design and build services powering Gateway nodes — including DNS proxy, firewall rule orchestration, policy enforcement, and device posture validation.
Collaborate with the Controller (back-end) and AI teams to enable adaptive, AI-driven access policies.
Engineer and optimize real-time communication (gRPC/REST/WebSockets) between Gateways, Connectors, and the Controller.
Develop observability and telemetry pipelines for Gateway nodes — logs, metrics, traces.
Contribute to the Gateway clustering model, ensuring scale-out routing, load balancing, and fault tolerance.
Collaborate closely with the Architects and DevOps team to align with CipherScale’s reference architecture and deployment blueprints.
Participate in design reviews, architecture discussions, and end-to-end testing (performance, resilience, and compliance).
Responsible for Quality of the Code - Write and maintain unit, integration, end-to-end, performance tests using AI, scripts, and code quality check tools;
Requirements
5+ years of software engineering experience, designing and deploying distributed systems at scale.
3+ years of hands-on experience with Go (Golang), including concurrency, memory management, networking, and performance tuning.
Deep understanding of network-level protocols and enforcement (TCP/IP, UDP, DNS, TLS, iptables/nftables, conntrack).
Proven experience building multi-tenant, security-sensitive systems with strict SLA and HA requirements.
Familiarity with authN/authZ protocols (OAuth 2.0, OpenID Connect, JWT, SMAL, Certificates) and risk-based access control.
Experience building and managing systems using Docker, Kubernetes, ArgoCD, and CI/CD pipelines.
Strong understanding of observability patterns — metrics, distributed tracing, and log pipelines.
Proven ability to work cross-functionally with architecture, AI, and infrastructure teams in a remote-first and distributed environment.
Nice to Have
Previous experience with NodeJS, Typescript, Javascript
Background in VPN technologies, access management, or cybersecurity
Experience with policy engines (e.g., OPA, Cedar)
Familiarity with Cloudflare (e.g., Workers, DNS, WAF)
Exposure to SaaS infrastructure and Kubernetes orchestration
Experience scaling high-traffic, production-grade systems
Prior experience in a startup environment
BSc/MSc in Computer Science, Engineering, or related field
Our philosophy is that we are a small, closely-knit team and we care deeply about you:
Competitive pay rates
Fully remote work environments
Self-managed time off
