Join OCI to design and deliver cloud-scale DDoS protection as part of our edge security platform.
You’ll design and ship high-performance detection and mitigation systems, automate operations end-to-end, and help define the technical foundation for customer-facing DDoS capabilities.
Basic qualifications
* 6+ years building production backend systems (at least 3 years in high-scale or low-latency environments).
* Proficiency in one or more: Java/Python/C++/Rust/Go
* Strong preference for Java for control-plane/services.
* Strong systems design skills: concurrency, memory management, performance tuning, API design, and distributed systems fundamentals.
* Experience with DevOps at scale: CI/CD, automated testing, canarying, rollout/rollback, and configuration management.
* IaC expertise (e.g., Terraform) and solid cloud infrastructure fundamentals.
* Familiarity with DDoS or network security services and related attack/defense patterns.
* Solid networking knowledge: TCP/IP, IPv4/IPv6, BGP fundamentals; DNS/DHCP understanding.
* Observability experience (metrics, tracing, alerting) and operational excellence mindset.
Preferred qualifications
* Experience with anycast routing, traffic steering, and multi-region service readiness.
* Exposure to SDN, programmable data planes, or hardware mitigation platforms.
* Advanced telemetry/streaming pipelines for near-real-time detection (e.g., high-rate packet/flow analytics).
* Background in resilience engineering, chaos testing, and capacity planning at hyperscale.
* Containerization/orchestration experience and secure service-to-service communication (mTLS, policy).
* Familiarity with zero trust principles, segmentation, and modern security architectures.
How you’ll have impact
* Ship core DDoS detection/mitigation capabilities that protect OCI’s Tier 0 availability.
* Enable new customer-facing DDoS offerings with self-service policy and visibility.
* Raise engineering quality, automation, and compliance maturity across the stack.
Ways of working
* Security and privacy by design; auditable controls and policy adherence from day one.
* Data-driven delivery with clear KPIs, SLOs, and stage gates from prototype to GA.
* Collaborative, inclusive engineering culture with code reviews, design docs, and knowledge sharing.
What you’ll do
* Design and build low-latency backend services for DDoS detection, classification, and mitigation across OCI’s global edge.
* Implement scalable data and control planes (policy, signaling, telemetry, orchestration) with strong fault isolation and resiliency.
* Develop traffic engineering capabilities (anycast, BGP signaling, routing policy) and integrate with OCI networking, DNS, and edge services.
* Own operational readiness: SLOs/SLAs, on-call health, incident response, runbooks, and post-incident improvements.
* Build automation-first workflows: CI/CD pipelines, test frameworks, canary/blue-green releases, and infrastructure-as-code.
* Create robust observability (metrics, logs, traces) and capacity/scale modeling for high-throughput, high-availability systems.
* Partner with product, SRE, and network engineering to deliver roadmap features from concept to GA with security-by-design.
* Contribute to threat modeling, architecture reviews, and compliance/audit readiness for Tier 0 services.