Senior Software Engineer

Description

We’re seeking a **Senior Software Engineer** to help build and evolve the **Gateway**, the edge enforcement and routing component of our AI\-driven Zero Trust Network Access (ZTNA) platform. The Gateway is central to the architecture, responsible for real\-time policy enforcement, DNS aliasing, and risk\-aware access control across multi\-tenant environments. You’ll design and develop secure, high\-performance, distributed systems that make the overlay network resilient, intelligent, and autonomous — whether deployed on\-prem, in the cloud, or at the edge. **Important:** * It will be a long\-term **B2B contract** * **Only for the** **Spain****, it will be** **a permanent employment opportunity** #### **Responsibilities** * **Design and build** services powering Gateway nodes — including **DNS proxy**, **firewall rule orchestration**, **policy enforcement**, and **device posture validation**. * Collaborate with the **Controller (back\-end) and AI teams** to enable **adaptive, AI\-driven access policies**. * Engineer and optimize **real\-time communication** (gRPC/REST/WebSockets) between Gateways, Connectors, and the Controller. * Develop **observability and telemetry pipelines** for Gateway nodes — logs, metrics, traces. * Contribute to the **Gateway clustering model**, ensuring scale\-out routing, load balancing, and fault tolerance. * Collaborate closely with the **Architects** and **DevOps team** to align with CipherScale’s reference architecture and deployment blueprints. * Participate in design reviews, architecture discussions, and end\-to\-end testing (performance, resilience, and compliance). * Responsible for **Quality of the Code** \- Write and maintain unit, integration, end\-to\-end, performance tests using AI, scripts, and code quality check tools; * **5\+ years** of software engineering experience, designing and deploying distributed systems at scale. * **5\+ years** of hands\-on experience with **Go (Golang)**, including concurrency, memory management, networking, and performance tuning. * Deep understanding of **network\-level protocols and enforcement** (TCP/IP, UDP, DNS, TLS, iptables/nftables, conntrack). * Proven experience building **multi\-tenant, security\-sensitive systems** with strict SLA and HA requirements. * Familiarity with **authN/authZ protocols** (OAuth 2\.0, OpenID Connect, JWT, SMAL, Certificates) and **risk\-based access control**. * Experience building and managing systems using **Docker, Kubernetes, ArgoCD**, and **CI/CD pipelines**. * Strong understanding of **observability patterns** — metrics, distributed tracing, and log pipelines. * Proven ability to work cross\-functionally with **architecture, AI, and infrastructure teams** in a remote\-first and distributed environment. #### **Nice to Have** * Previous experience with **NodeJS**, **Typescript**, **Javascript** * Background in **VPN technologies**, **access management**, or **cybersecurity** * Experience with **policy engines** (e.g., **OPA**, **Cedar**) * Familiarity with **Cloudflare** (e.g., **Workers**, **DNS**, **WAF**) * Exposure to **SaaS infrastructure** and **Kubernetes orchestration** * Experience scaling **high\-traffic**, **production\-grade systems** * Prior experience in a **startup environment** * **BSc/MSc** in Computer Science, Engineering, or related field **Our philosophy is that we are a small, closely\-knit team and we care deeply about you:** * Competitive pay rates * Fully remote work environments * Self\-managed time off