Principal Software Engineer, Device Security & Containers (NGFW) - NetSec
Core
Build enterprise managed devices running the PANW security stack, serving as the primary technical interface between software and hardware teams for platform firmware, cloud management agents, and hardware bring-up.
Role type
Principal Software Engineer (Embedded Systems & Security)
Builds
Enterprise security devices with embedded Linux, containerized security stacks, and hardware-integrated security features.
Domain
Cybersecurity, Embedded Systems, Network Security
Required skills
Embedded Linux systems programming, eBPF/XDP/TC programming, Container runtime management (Docker/containerd), C/C++ programming, Netfilter/nftables, Firmware security hardening, Post-quantum cryptography implementation, SoC performance optimization
Preferred skills
IDS/IPS system implementation, Edge ML inference with NPU integration, Secure boot chains and TPM trust anchors, Packet processing (DPDK), Network protocol parsing (L2-L4)
Technologies
Linux, eBPF, Docker, containerd, C, C++, Python, netfilter, nftables, XDP, TC, DPDK, TPM, NPU
Responsibilities
Design and implement container runtime for isolated privileged security stack; Build data path integration using netfilter hooks and eBPF; Benchmark and optimize security inspection across SoC tiers; Implement IPS/IDS capabilities including rogue device detection; Develop post-quantum cryptography at the application layer; Establish firmware security hardening baseline.
Seniority
Principal, hands-on IC with strategic hardware-software integration
