Sr. DDOS Software Engineer

Oracle

13d

About The Position

Join OCI to design and deliver cloud-scale DDoS protection as part of our edge security platform. You’ll design and ship high-performance detection and mitigation systems, automate operations end-to-end, and help define the technical foundation for customer-facing DDoS capabilities.

Requirements

6+ years building production backend systems (at least 3 years in high-scale or low-latency environments).
Proficiency in one or more: Java/Python/C++/Rust/Go
Strong preference for Java for control-plane/services.
Strong systems design skills: concurrency, memory management, performance tuning, API design, and distributed systems fundamentals.
Experience with DevOps at scale: CI/CD, automated testing, canarying, rollout/rollback, and configuration management.
IaC expertise (e.g., Terraform) and solid cloud infrastructure fundamentals.
Familiarity with DDoS or network security services and related attack/defense patterns.
Solid networking knowledge: TCP/IP, IPv4/IPv6, BGP fundamentals; DNS/DHCP understanding.
Observability experience (metrics, tracing, alerting) and operational excellence mindset.

Nice To Haves

Experience with anycast routing, traffic steering, and multi-region service readiness.
Exposure to SDN, programmable data planes, or hardware mitigation platforms.
Advanced telemetry/streaming pipelines for near-real-time detection (e.g., high-rate packet/flow analytics).
Background in resilience engineering, chaos testing, and capacity planning at hyperscale.
Containerization/orchestration experience and secure service-to-service communication (mTLS, policy).
Familiarity with zero trust principles, segmentation, and modern security architectures.

Responsibilities

Design and build low-latency backend services for DDoS detection, classification, and mitigation across OCI’s global edge.
Implement scalable data and control planes (policy, signaling, telemetry, orchestration) with strong fault isolation and resiliency.
Develop traffic engineering capabilities (anycast, BGP signaling, routing policy) and integrate with OCI networking, DNS, and edge services.
Own operational readiness: SLOs/SLAs, on-call health, incident response, runbooks, and post-incident improvements.
Build automation-first workflows: CI/CD pipelines, test frameworks, canary/blue-green releases, and infrastructure-as-code.
Create robust observability (metrics, logs, traces) and capacity/scale modeling for high-throughput, high-availability systems.
Partner with product, SRE, and network engineering to deliver roadmap features from concept to GA with security-by-design.
Contribute to threat modeling, architecture reviews, and compliance/audit readiness for Tier 0 services.