Architect, Perimeter and Network Security

What you'll do

• Define and drive the long-term security architecture, roadmap, and defense-in-depth strategy for perimeter and network systems.
• Design and architect technical solutions for WAF protection, DDoS mitigation, bot prevention, and TLS management at scale.
• Architect the full traffic path including edge proxies, load balancers, service mesh, and API/AI security gateways.
• Develop the orchestration and control plane to manage configuration, policy distribution, and lifecycle management across large fleets.
• Design security controls for multiple protocols including TCP, UDP, HTTP/HTTPS, and TLS against evolving threats.
• Write production-quality code and develop prototypes to establish technical standards and patterns for the engineering team.
• Partner with internal infrastructure and application teams to design integrated solutions that meet specific traffic requirements.
• Identify and mitigate systemic risks, security gaps, and technical debt before they become production vulnerabilities.

What we're looking for

• Bachelor's degree in Computer Science, Computer Engineering, or equivalent.
• 15+ years of hands-on software engineering experience in security architecture or senior technical leadership roles.
• Expert knowledge of perimeter and network security including WAF, DDoS mitigation, bot detection, and TLS/mTLS.
• Deep experience with proxy technologies such as NGINX, Envoy, and HAProxy across edge, service mesh, and API gateways.
• Experience designing orchestration and control plane systems for security policy distribution at scale.
• Proven ability to architect high-availability systems across on-premises data centers and public cloud environments (GCP, AWS).
• Strong proficiency in Java/J2EE for building backend platforms and writing production-quality code.
• Excellent communication skills to produce architecture documents and present complex concepts to diverse audiences.