Sr. Software Engineer (GO)- DNS & Network Systems

Securly; Pune District; Hybrid; INR 2,000,000 - 3,000,000; Full time

Benefits offered by this job

Comprehensive Health Insurance

Accidental & Term Life Insurance

Learning & Development reimbursement

Paid Time Off

Public Holidays (10+ per year)

Retirement Benefits (EPF & gratuity)

Parental Leave (as per statutory norms)

Job summary

Securly is seeking a Senior Software Engineer (Go) for DNS & Network Systems in Pune, India. You will architect and build a high-performance DoH resolver, integrating with Securly's systems and leading junior engineers. Ideal candidates have expert-level Go proficiency, deep knowledge of DNS protocols, and experience with Redis and TLS management. This role supports a hybrid work model with significant responsibilities in enhancing network security for millions of students globally.

Qualifications

• Expert-level proficiency in Go (Golang) and over 5 years of production experience.
• Strong understanding of DNS protocol, architecture, and DoH.
• Experience with Redis for data lookups and TLS management.

Responsibilities

• Architect and build a production-grade DoH resolver in Go.
• Implement identity extraction from Chrome's DNS templates.
• Lead production hardening phases and mentor junior engineers.

Skills

Go (Golang)

DNS protocol & architecture

DNS-over-HTTPS

Redis

TLS / certificate management

Technical communication

Tools

AWS

Unbound DNS server

Job description

This is a critical infrastructure role at the intersection of DNS, identity, and network security. You will design and build a high-performance DoH resolver in Go that extracts device and user identity from Chrome enterprise policy URL templates and integrates with Securly's DNS policy engine and Redis infrastructure. You own the full lifecycle: architecture, implementation, TLS configuration, and production deployment on AWS.

The Role

As a Senior Software Engineer (Go)- DNS & Network Systems, you will own the architecture and delivery of Securly's DNS-over-HTTPS (DoH) resolver — a production‑grade, identity‑aware DNS service that enforces filtering policy at the browser and OS level for millions of students on managed Chromebooks.

Level & Location

Level: L5–L6 | Experience: 8–15 Years | Location: Pune, India | Work Type: Hybrid (2 days onsite) | Reports To: Filter Engineering Manager

What It Means to Be L5 at Securly

L5 at Securly is a Staff Engineer. You are the technical owner, not just an implementer.

Responsibilities

• Architect and build a production‑grade DoH resolver in Go, integrated with Securly's DNS policy engine and Unbound infrastructure.
• Implement identity extraction from Chrome's DnsOverHttpsTemplatesWithIdentifiers URL template variables — mapping encrypted DNS queries to device and user identity, and evaluate the degree to which this approach can replace SmartPAC DNS‑RPC signaling.
• Build an Unbound plugin with filtering business logic to process DoH queries with identity parameters from the URL template.
• Integrate with Redis infrastructure for policy lookups, identity mapping, state management, and feature flags; document failure modes and define graceful degradation behavior.
• Own TLS termination: certificate provisioning, renewal, and ensuring Chrome correctly validates the DoH endpoint certificate.
• Architect and own the CloudFormation deployment stack: NLB, Auto Scaling Groups, Route53.
• Lead the POC and production hardening phases in collaboration with Securly's Distinguished Engineer; produce a written ADR capturing tradeoffs and the go/no‑go recommendation after POC.
• Mentor junior engineers on DNS fundamentals, Go patterns, and infrastructure‑as‑code practices.
• Document the new architecture and own knowledge transfer as the system transitions.

Must‑Have Skills

• Go (Golang) — expert‑level, 5+ years production proficiency. Must be ready to build on day one.
• DNS protocol & architecture — RFC 1035, recursive vs. authoritative resolution, DNSSEC, DNS wire format, Unbound as a recursive resolver.
• DNS‑over‑HTTPS (RFC 8484) — DoH protocol, HTTP/2 transport, application/dns‑message media type, Chrome DoH client behavior.
• Redis — data structures, pipeline usage, policy lookup patterns, performance characteristics, failure mode handling.
• TLS / certificate management — termination, provisioning, renewal, client certificate validation.
• Technical communication — written ADRs, architecture diagrams, trade‑off analyses. L5 engineers leave a written record of major decisions.

Strongly Preferred Skills

• AWS (CloudFormation, NLB, ASG, Route53) — Securly infrastructure is fully CloudFormation‑managed.
• Unbound DNS server — operational experience or module‑level development.
• SmartPAC / PAC‑based proxy architecture — understanding of Securly's existing DID/cookie/DNS‑RPC identity system.

Nice to Have Skills

• C/C++ — relevant if Unbound module development requires changes at the C layer.
• Chrome enterprise policy — Google Admin Console, DnsOverHttpsMode, DnsOverHttpsTemplatesWithIdentifiers.
• K‑12 EdTech / CIPA compliance / web content filtering domain experience.

Who You Are

• You think in protocols. DNS, TLS, HTTP/2 — you know what happens at the wire level and find that interesting, not painful.
• You are comfortable owning a project end to end: from research and POC through production hardening and deployment, without being handed a spec.
• You write Go that other senior engineers want to read. Idiomatic, tested, observable.
• You have worked on infrastructure other products depend on and understand what production ownership actually means.
• You produce written artifacts (ADRs, position papers, risk registers) to anchor ambiguous decisions rather than leaving them implicit.
• You make other engineers better. Your code reviews are substantive, your design feedback is specific.

Benefits

• Comprehensive Health Insurance (employee, parents, spouse, children)
• Accidental & Term Life Insurance
• Learning & Development reimbursement
• Paid Time Off
• Public Holidays (10+ per year)
• Retirement Benefits (EPF & gratuity)
• Parental Leave (as per statutory norms)

Equal Opportunity Employer

Equal Opportunity Employer
Securly is an Equal Opportunity Employer committed to inclusion, fairness, and respect. We welcome applicants from all backgrounds, identities, and experiences.