Senior Staff Software Engineer – Go or Rust / DNS Networking

Securly; India; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Comprehensive health insurance

PTO

Learning reimbursement

Retirement benefits (EPF & gratuity)

Job summary

Securly is seeking a Senior Staff Software Engineer to build a DNS-over-HTTPS resolver at scale. You can use Go or Rust you’re strongest in, and you’ll own the design, implementation, and production operations end-to-end.

In this role you’ll extract device and user identity from requests, integrate with Redis for policy checks, and ship the system on AWS. Remote or hybrid work options are available, with onsite days if local.

Qualifications

• Must have 4+ years writing production code in Go or Rust.
• Solid understanding of how DNS works—resolution, records, and security implications.
• Ability to work independently through ambiguity and produce clear documentation.

Responsibilities

• Design, code, ship, and run a high-performance DoH resolver in production.
• Extract device/user identity from requests and apply policy checks in Redis.
• Manage deployment to AWS and implement reliable production hardening.
• Write design documents to communicate tradeoffs for future engineers.

Skills

Golang

Rust

DNS

Tools

Redis

TLS

Job description

Senior Staff Software Engineer – Golang (Go) or Rust / DNS Networking

Securly protects over 20 million students across 20,000+ schools by filtering harmful content at the network level — in real time, at massive scale (1.1B+ requests/day). You'll build a core piece of that system: a DNS-over-HTTPS (DoH) resolver that identifies which student or device is making a request and applies the right safety policy, instantly.

This is a from-scratch build. You'll own it end to end — design, code, ship, and run it in production. We're open to either Go or Rust for this — use whichever you're strongest in.

Experience: 6–12 years

Location: Remote or Hybrid (2 days onsite if local)

Reports to: SVP of Engineering

What You'll Build

• A high-performance DoH resolver, written in Go or Rust, that handles encrypted DNS traffic from managed Chromebooks
• Logic to extract device/user identity from the request and check it against policy in Redis
• The deployment pipeline to get this running reliably on AWS
• A written design doc laying out what you built and why, so the next engineer (or your future self) understands the tradeoffs

You'll work closely with our Distinguished Engineer during the design phase, then take the system through to production hardening on your own.

Must-Have

• Golang (Go) or Rust, 4+ years writing production code in one of the two — not scripts, not tutorials, real systems in production
• Solid understanding of how DNS works — resolution, records, why DNS matters for security, and comfort reading RFCs when needed
• Ability to work independently through ambiguity — this role starts with a rough problem, not a finished spec
• Can write clearly — a short doc explaining a technical decision, not just code

Good to Have (not required — we'll teach you)

• DNS-over-HTTPS (RFC 8484) or experience with encrypted DNS
• Redis, or any similar key-value store used for lookups at scale
• TLS/certificate management
• AWS, especially CloudFormation
• Unbound or any recursive DNS resolver
• Exposure to enterprise/managed-device environments (Chrome policy, MDM, etc.)
• Prior work in ad-tech, cybersecurity, or network infrastructure
• If you know Go and Rust both, even better — but one at production depth is what we need

What Success Looks Like

• You take a genuinely ambiguous problem and drive it to a working system with minimal hand-holding
• Your code is something other senior engineers want to review, not something they have to fix
• You mentor 1–2 junior engineers along the way — code reviews, pairing, raising the bar
• You leave a clear paper trail on major decisions so the team isn't relying on your memory

Why This Role

• You're not maintaining someone else's system — you're building the thing from zero
• Direct line to a Distinguished Engineer and SVP of Engineering; high visibility
• Real-world impact: this system protects millions of students every day
• Comprehensive health insurance (self + family), PTO, learning reimbursement, retirement benefits (EPF & gratuity)