Netskope Cloud Data Plane engineers architect and design one of the most scalable, high-performance cloud data planes in the world, processing 10+ Gbps of traffic, performing deep inspection using state-of-the-art techniques like AI/ML to detect activities and apply advanced policies like DLP, Threat and UEBA protection, all at line rate.
Whats in it for you
In this role you will be a key member of our in-line CASB Inline product, which have been recognized by Gartner as market leaders in their Magic Quadrant reports:
Netskope CASB in Gartner 2023 SSE Magic Quadrant
What you will be doing
- Review product design and suggest improvements from testability and user perspective.
- Through understanding of Data Plane architecture and packet processing pipeline with domain knowledge in handling Application traffic and security packet inspection techniques like Data loss prevention, Threat Inspection.
- Design and deliver effective and automatable test plans.
- Write test automation which can execute on large parallelized CI/CD Infrastructure
- Be an effective code reviewer for automation and product code.
- Analyze and recommend the right tools for automation.
- Simulate negative scenarios and perform chaos testing.
- Handle customer escalations by recreation, collecting debug logs, work with Development teams on root cause analysis and drive customer issues to closure from QE perspective.
- Work closely with the development team, product management, Support team and other stakeholders in various phases of product development to ensure alignment with strategy, planning, risks and mitigations.
- Through understanding of the SDLC process.
- Perform real-time content analysis to ensure robust security measures.
- Conduct deep inspection of traffic to detect and mitigate threats in near real-time.
- Write and maintain product or system development code, ensuring high standards of quality.
- Develop Automation scripts and maintain comprehensive documentation.
- Build and maintain services capable of inspecting various network protocols, such as HTTP, at line rate.
- Review and provide feedback on code developed by other team members to ensure adherence to best practices, including style guidelines, code accuracy, testability, and efficiency.
- Contribute to the architecture and design of distributed systems, focusing on scalability, reliability, and efficiency.
- Collaborate with cross-functional teams, including software engineers, system architects, and product managers, to deliver high-quality software solutions.
Required skills and experience
- 10+ years of industry experience in designing and developing automated tests and frameworks for enterprise grade software, including direct experience developing scalable, high-performance cloud services based upon microservices architecture
- Experience in network and web security technologies - firewalls, Web Application Firewall, L7 Access-Policies, web security, IDP / IPS, DNS based security, L7 DDoS.
-
Deep understanding of networking protocols
including TCP/IP, HTTP/S,WebSocket, DNS, TLS/SSL decryption (MITM)
techniques, L3 VPNs like IPSec, Wireguard etc. -
Must Have
Good fundamentals of TCP, TLS, HTTP protocols. -
Must Have
Http proxy experience. - Programming mastery in Python.
- Strong understanding of computer architecture - multi-threading, CPU scheduling, memory management
- Good understanding of algorithms and data structure to implement Real-time inline data processing
- Strong expertise in RESTful Web Service automation and Day-1 automation readiness.
- Strong expertise in cloud technologies like Docker, Kubernetes, Helm etc
- Expertise in message protocols like KAFKA, NATS etc
- Expertise in capturing the packets using Wireshark, tcpdump etc and analyzing the packets captured.
- Proven experience in data plane/data path testing for security products (eg, Firewalls, Proxies, IDPS, DPI engines).
- we'll versed with automation tools like Robot framework, Selenium, Healenium, Playwright MCP etc
- Strong expertise in Solution testing, Load and Stress testing, Longevity, WebUI testing and automation with relevance in L7 Security.
- Strong understanding of computer architecture, including multi-threading, CPU scheduling, and memory management.
- Advanced understanding of algorithms and data structures for real-time in-line data processing.
- Extensive knowledge of Linux at a systems level.
- Exceptional analytical and troubleshooting skills, proficient in using debuggers like gdb and tools like Valgrind.
- Experience with performance optimization and scalability of complex systems.
- Strong analytical and troubleshooting skills using debuggers like gdb and tools like Valgrind.
- Hands-on experience with packet capture technologies (eg, tcpdump, Wireshark, libpcap) for network traffic analysis and troubleshooting.
- Experience working within a
SASE
(Secure Access Service Edge) architecture is a major plus. -
Strong knowledge of Authentication technologies
including Identity and Access Management, SSO, SAML, OpenID, OAuth2, and MFA is a Plus.
Education
- BSCS or equivalent required, MSCS or equivalent strongly preferred