You'll build the core systems that enable users to seamlessly and securely access internal sites, private applications, and cloud resources directly from the browser – without legacy VPNs or remote desktops – while enforcing real-time protection against zero-day exploits, phishing, data exfiltration, and unauthorized access.
This role sits at the intersection of network engineering and browser security: you'll design and implement advanced proxy communication, secure tunneling, and identity-aware routing – all operating at the browser's core to deliver holistic protection including DLP, insider threat detection, SaaS security, and continuous zero-trust verification.
What You'll Do:
Design and build ZTNA infrastructure – implement zero-trust access policies, secure tunneling, and identity-aware network routing that replaces traditional VPN architectures
Develop advanced networking solutions – build and optimize proxy communication layers, WebSocket-based transport, and encrypted client-to-server channels that handle millions of concurrent connections
Architect high-scale backend systems – design distributed microservices for policy enforcement, real-time threat detection, and access control at scale using Node.js / TypeScript
Implement secure client-server communication – design highly secured agent-to-cloud architectures with certificate pinning, mutual TLS, and encrypted tunneling protocols
Build browser-native security components – develop browser extensions and agents (Chrome, Edge, Firefox etc.) that enforce data protection, prevent data leakage, and provide granular visibility and control
Own features end-to-end – from design through delivery, including deployment and monitoring
Influence architecture and roadmap – play a key role in architectural decisions, building toward an efficient distributed zero-trust architecture
Research and develop – drive new initiatives and POCs in zero-trust access domains and browser security
Collaborate cross-functionally – work with security researchers, product, and platform teams across multiple locations to solve complex problems
5+ years of industry experience building high-performance software products, preferably in cybersecurity
Strong networking fundamentals – deep understanding of communication protocols (TCP/IP, TLS, WebSockets, HTTP/2), proxy architectures, and tunneling mechanisms
Proven backend expertise – experience designing and developing high-scale microservices in Node.js / TypeScript / Python / GO / C++
Hands-on experience with proxy and secure communication – WebSocket implementations, forward/reverse proxies, MITM inspection, and encrypted channel design
Familiarity with encryption and secure communication – TLS/mTLS, certificate management, key exchange protocols, and secure session handling
Experience with client-agent development – building complex, efficient client-side agents with reliable server communication
Cloud platform experience – AWS, GCP, or Azure, with understanding of on-premises and hybrid infrastructure
Strong research and debugging capabilities – ability to dive deep into protocol-level issues, browser internals, and network traces
BS or MS in Computer Science or related engineering discipline
Proactive problem-solver with attention to detail and a team-oriented mindset
