Senior Network Security Engineer: DDoS, eBPF/XDP & DPDK

Amazon Web Services (AWS); Santa Clara (CA); On-site; USD 168,000 - 227,000; Full time

Job summary

Amazon.com Services LLC seeks an experienced Systems Engineer to build and scale the data plane for Global Accelerator, focusing on network security and DDoS resilience. You will work across forwarding, load balancing, connection tracking, and traffic mitigation with tight latency constraints.

The role requires deep expertise in kernel-bypass networking, eBPF/XDP, and DPDK, with collaboration across AWS Shield and networking teams to deliver secure, scalable infrastructure for global traffic.

Qualifications

• 5+ years of professional software development experience
• Experience mentoring or leading an engineering team
• Experience with security-focused networking or DDoS mitigation
• Hands-on work with eBPF/XDP, DPDK or kernel-bypass frameworks
• Strong problem-solving skills in high-throughput environments

Responsibilities

• Design and build high-performance DDoS mitigation systems in kernel and userspace
• Develop eBPF/XDP programs for fast packet filtering
• Extend DPDK-based packet processor with mitigation primitives
• Analyze attack patterns and translate into automated defenses
• Own full lifecycle of security-critical infrastructure serving global traffic
• Collaborate with AWS Shield, CloudFront, and networking teams

Skills

eBPF/XDP

DPDK

Kernel bypass

Security engineering

Networking

Leadership/mentoring

Programming languages

Education

Bachelor's degree in computer science or equivalent

Tools

eBPF/XDP

DPDK

AF_XDP

Job description

Amazon.com Services LLC seeks an experienced Systems Engineer to build and scale the data plane for Global Accelerator, focusing on network security and DDoS resilience. You will work across forwarding, load balancing, connection tracking, and traffic mitigation with tight latency constraints.

The role requires deep expertise in kernel-bypass networking, eBPF/XDP, and DPDK, with collaboration across AWS Shield and networking teams to deliver secure, scalable infrastructure for global traffic.