Senior Software Engineer (Rust) - Proxy Infrastructure

About the role

The Senior Software Engineer (Rust) - Proxy Infrastructure will own production hardening, performance validation, and infrastructure operations for Securly's Rust web filtering proxy - establishing the reliability and scalability baseline that millions of students depend on, and owning the on-premise Docker proxy appliance for school network environments. Your mission is to ensure the proxy performs, scales, and deploys reliably in production. You will own canary rollout configuration, CloudFormation-based scaling infrastructure, load testing strategy, and performance baseline definition. You will also own the on-premise Docker appliance - a lightweight Rust proxy deployed in school network environments that intercepts TCP traffic and prepends identity headers. At L5, this is not purely an infra-execution role. You are expected to identify systemic reliability risks in the proxy stack and propose architectural mitigations, not just react to incidents. You define what 'production-ready' means and enforce that bar. Level: L5 Experience: 8-15 Years Location: Pune, India Work Type: Hybrid (2 days onsite) Reports To: Filter Engineering Manager

Responsibilities

• Define what 'production-ready' means for the Rust proxy: establish written performance baselines, reliability criteria, and the specific metrics that trigger a rollback vs. a hotfix.
• Design and execute load tests to identify performance bottlenecks; profile memory and CPU under peak and sustained load; produce baseline documents the team references across deployments.
• Own canary rollout configuration and CloudFormation-based ASG scaling policies - modify templates, configure health checks, tune scaling behavior; document every configuration decision with rationale.
• Identify and propose mitigations for known proxy infrastructure risk areas including Redis behavior under peak throughput, CORS/proxy transparency edge cases, and connection pool exhaustion.
• Maintain and harden the on-premise Docker proxy appliance - image builds, container networking, minimal image design, and distribution to school network environments.
• Investigate and resolve production performance issues under peak load; produce written post-mortems that close the loop on root cause.
• Build monitoring, dashboards, and alerting for proxy infrastructure (CloudWatch, Splunk); define SLO targets and ensure alerting is calibrated to them.
• Contribute to C++ to Rust business logic conversion work alongside the Proxy Conversion engineer.
• Support TCP stream handling and socket-level work for the on-premise appliance: bidirectional forwarding, port interception, identity header injection.
• Skills & Requirements

Requirements

• Rust - same production standard as the Proxy Conversion role: ownership, lifetimes, async/await (Tokio), systems-level networking. 4+ years at production level.
• Systems / network programming - TCP stream handling, socket programming, bidirectional forwarding; understanding what happens below the HTTP layer.
• Docker / containerization - image building, distribution, minimal image design for appliance deployment, container networking.
• Performance testing and profiling - load test design, memory and CPU profiling, bottleneck identification, flame graph analysis, production baseline definition.
• AWS (CloudFormation, NLB, ASG, EC2) - owns canary rollout; must independently modify CloudFormation templates, configure health checks, and tune ASG scaling policies from day one.
• Production ownership mindset - demonstrated ability to define reliability criteria, write post-mortems, set SLO targets, and hold a system to a documented standard. L5 engineers set the bar.
• Strongly Preferred
• C++ - required for contributing to the business logic conversion effort; must read and reason about existing proxy C++ code.
• Redis - performance impact under high load; experience with Redis behavior under peak throughput and failure mode handling.
• CORS and proxy transparency - experience diagnosing and resolving CORS errors and proxy authentication transparency issues.
• RADIUS protocol - the on-premise appliance integrates with RADIUS for user identity.
• Monitoring / observability - CloudWatch metrics and dashboards, Splunk log integration, SLO/SLA definition.
• Web filtering / content inspection domain experience - URL categorization, CIPA compliance.
• You take performance personally - you do not accept 'probably fast enough.' You profile, you measure, you prove it - and then you write it down.
• You have owned production infrastructure and understand that canary rollouts, health checks, and scaling policies are not afterthoughts - they are the job.
• You are comfortable in the systems layer: TCP streams, socket programming, and container networking are familiar territory.
• You identify systemic risks before they become incidents. You advocate for reliability improvements over tactical fixes.
• You produce written artifacts - post-mortems, baseline documents, SL

Benefits

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at securly13? Share your experience