The Role

As a Senior Software Engineer (GO) - DNS & Network Systems, you will own the architecture and delivery of Securly's DNS-over-HTTPS (DoH) resolver — a production-grade, identity-aware DNS service that enforces filtering policy at the browser and OS level for millions of students on managed Chromebooks.

This is a critical infrastructure role at the intersection of DNS, identity, and network security. You will design and build a high-performance DoH resolver in Go that extracts device and user identity from Chrome enterprise policy URL templates and integrates with Securly's DNS policy engine and Redis infrastructure. You own the full lifecycle: architecture, implementation, TLS configuration, and production deployment on AWS.

This role is the technical foundation of a potential simplification of Securly's SmartPAC identity architecture. Done well, it could collapse significant DNS-RPC signaling complexity (DID/cookie system, IP fusing, brokering state) that has been a source of reliability issues. The scope of that architectural decision will evolve with the POC, and you will be the engineer best positioned to inform it.

Level: **L5–L6_____**Experience: **8–15 Years_____**Location: **Pune, India_____**Work Type: **Hybrid (2 days onsite)_____**Reports To: Filter Engineering Manager

What You'll Do

Architect and build a production-grade DoH resolver in Go, integrated with Securly's DNS policy engine and Unbound infrastructure.
Implement identity extraction from Chrome's DnsOverHttpsTemplatesWithIdentifiers URL template variables — mapping encrypted DNS queries to device and user identity, and evaluate the degree to which this approach can replace SmartPAC DNS-RPC signaling.
Build an Unbound plugin with filtering business logic to process DoH queries with identity parameters from the URL template.
Integrate with Redis infrastructure for policy lookups, identity mapping, state management, and feature flags; document failure modes and define graceful degradation behavior.
Own TLS termination: certificate provisioning, renewal, and ensuring Chrome correctly validates the DoH endpoint certificate.
Architect and own the CloudFormation deployment stack: NLB, Auto Scaling Groups, Route53.
Lead the POC and production hardening phases in collaboration with Securly's Distinguished Engineer; produce a written ADR capturing tradeoffs and the go/no-go recommendation after POC.
Mentor junior engineers on DNS fundamentals, Go patterns, and infrastructure-as-code practices.
Document the new architecture and own knowledge transfer as the system transitions.

The Role

Level: **L5–L6_____**Experience: **8–15 Years_____**Location: **Pune, India_____**Work Type: **Hybrid (2 days onsite)_____**Reports To: Filter Engineering Manager

What You'll Do

Architect and build a production-grade DoH resolver in Go, integrated with Securly's DNS policy engine and Unbound infrastructure.

Implement identity extraction from Chrome's DnsOverHttpsTemplatesWithIdentifiers URL template variables — mapping encrypted DNS queries to device and user identity, and evaluate the degree to which this approach can replace SmartPAC DNS-RPC signaling.

Build an Unbound plugin with filtering business logic to process DoH queries with identity parameters from the URL template.

Integrate with Redis infrastructure for policy lookups, identity mapping, state management, and feature flags; document failure modes and define graceful degradation behavior.

Own TLS termination: certificate provisioning, renewal, and ensuring Chrome correctly validates the DoH endpoint certificate.

Architect and own the CloudFormation deployment stack: NLB, Auto Scaling Groups, Route53.

Lead the POC and production hardening phases in collaboration with Securly's Distinguished Engineer; produce a written ADR capturing tradeoffs and the go/no-go recommendation after POC.

Mentor junior engineers on DNS fundamentals, Go patterns, and infrastructure-as-code practices.

Document the new architecture and own knowledge transfer as the system transitions.

Senior Software Engineer (GO) - DNS & Network Systems

The Role

What You'll Do

Senior Software Engineer (GO) - DNS & Network Systems

The Role

What You'll Do

Skills & Requirements

Must-Have

Strongly Preferred

Nice to Have

Who You Are

What It Means to Be L5 at Securly

About Securly

Benefits

Securly

Securly

Benefits

Securly