Senior Proxy Engineer

Proofpoint

Sunnyvale, CA

JOB DETAILS
SKILLS
Accounts Payable, Application Programming Interface (API), Architectural Design, Artificial Intelligence (AI), Artificial Intelligence (AI) Agents, Authentication, Best Sales Team, Budgeting, Circuit Breakers, Cloud Computing, Compensation and Benefits, Computer Security, Concurrency, Customer Relations, Editing, Establish Priorities, Fortune 1000 Customers, Go Programming Language (Golang), HTTP (HyperText Transport Protocol), HTTPS (HyperText Transport Protocol Secure), Injections, Internet Security, Load Balancing, Lua, Maintenance - Pool, Microsoft Outlook, Multiplexing, Negotiation Skills, Network Connectivity, Network Routing, Protocol Design, RFC, RPC (Remote Procedure Call), Regulatory Compliance, Risk, Routing Protocols, SSL-TLS (Secure Socket Layer - Transport Layer Security), Security Attacks, Social Media, System Architecture, Traffic Shaping, Virtual Hosting
LOCATION
Sunnyvale, CA
POSTED
3 days ago
About Us:


Proofpoint is a global leader in human- and agent-centric cybersecurity. We protect how people, data, and AI agents connect across email, cloud, and collaboration tools. Over 80 of the Fortune 100, 10,000 large enterprises, and millions of smaller organizations trust Proofpoint to stop threats, prevent data loss, and build resilience across their people and AI workflows. Our mission is simple: safeguard the digital world and empower people to work securely and confidently. Join us in our pursuit to defend data and protect people.


How We Work:


At Proofpoint you’ll be part of a global team that breaks barriers to redefine cybersecurity guided by our BRAVE core values:


Bold in how we dream and innovate


Responsive to feedback, challenges and opportunities


Accountable for results and best in class outcomes


Visionary in future focused problem-solving


Exceptional in execution and impact


Corporate Overview

Proofpoint is a leading cybersecurity company protecting organizations’ greatest assets and biggest risks: vulnerabilities in people. With an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber-attacks. Leading organizations of all sizes, including more than half of the Fortune 1000, rely on Proofpoint for people-centric security and compliance solutions mitigating their most critical risks across email, the cloud, social media, and the web.

We are singularly devoted to helping our customers protect their greatest assets and biggest security risk: their people. That’s why we’re a leader in next-generation cybersecurity.

Protection Starts with People. Proofpoint.


Job Title:


Senior Proxy Engineer


Locations Hyderabad, A.P., India Athens, Greece Sunnyvale, CA, USA Role


Overview


We are seeking a Senior Proxy Engineer to design, build, and operate production-grade proxy infrastructure at scale. This role demands expert command of HTTP and related application-layer protocols, deep experience architecting proxy systems, and primary development fluency in Go with strong Lua scripting skills for runtime extensibility. You will own the full lifecycle of our proxy platform — from protocol-level design and connection management through TLS termination, request routing, traffic shaping, and upstream load balancing — serving as the technical authority on how traffic flows through our infrastructure. You will work across forward proxies, reverse proxies, API gateways, and protocol translators, handling a diverse set of methodologies including explicit HTTP proxying, transparent interception, SOCKS tunnelling, and CONNECT-based HTTPS proxying. Familiarity with OpenTelemetry for deep proxy observability is a meaningful plus.


Key Responsibilities


+ Proxy Architecture & Core Pipeline Design Architect and implement high-performance forward, reverse, and transparent proxy systems in Go with clean separation between the connection layer, protocol layer, routing layer, and upstream layer

+ Design proxy pipeline stages end-to-end: listener configuration, connection acceptance, TLS termination, protocol detection, virtual hosting, routing rule evaluation, request transformation, upstream selection, response streaming, and connection teardown

+ Build robust connection lifecycle management: keep-alive handling, half-close semantics, graceful shutdown, drain periods, and connection migration for rolling deployments

+ Implement traffic shaping primitives within the proxy: request hedging, retry budgets, timeout hierarchies (connect, first byte, total request), circuit breakers, and adaptive concurrency limits

+ Design and maintain upstream connection pools with configurable keep-alive timeouts, max idle connections per host, connection health checks, and zero-downtime upstream replacement

+ Own the header manipulation pipeline: request and response header rewriting, injection, removal, and normalisation with attention to correctness under HTTP/1.1 and HTTP/2 semantics

+ Architect multi-tenant proxy configurations with per-tenant routing policies, rate limits, authentication schemes, and traffic isolation guarantees HTTP Protocol Engineering & Standards Compliance

+ Maintain expert-level understanding of the core HTTP specification suite: RFC 9110 (HTTP Semantics), RFC 9112 (HTTP/1.1 Message Syntax), RFC 9113 (HTTP/2), RFC 9114 (HTTP/3), and RFC 9000 (QUIC)

+ Implement correct HTTP/1.1 connection management: persistent connections, keep-alive negotiation, chunked transfer encoding, request pipelining, and trailer fields Implement full HTTP/2 support: stream multiplexing, flow control (stream and connection level), header compression via HPACK, server push, RST_STREAM handling, and SETTINGS negotiation

+ Build HTTP/3 and QUIC proxying support: stream prioritisation, 0-RTT connection establishment, connection migration, and loss-recovery-aware flow control

+ Implement cache-control semantics per RFC 9111: Vary header handling, conditional request support (ETags, If-Modified-Since, If-None-Match), surrogate-key invalidation, and stale-while-revalidate

+ Handle HTTP edge cases defensively: malformed header detection, header field size limits, request smuggling mitigations (CL-TE and TE-CL desync), response splitting defences, and observer-invisible whitespace normalisation

+ Support WebSocket upgrade flows with correct Upgrade/Connection header handling, frame proxying, bidirectional streaming, and Ping/Pong keepalive management

+ Implement gRPC-over-HTTP/2 proxying: correct framing of length-prefixed messages, trailer handling for gRPC status codes, streaming RPC proxying, and gRPC-Web transcodeWhy ProofpointProtecting people is at the heart of our award-winning lineup of cybersecurity solutions, and the people who work here are the key to our success. We’re a customer-focused and a driven-to-win organization with leading-edge products. We are an inclusive, diverse, multinational company that believes in culture fit, but more importantly ‘culture-add’, and we strongly encourage people from all walks of life to apply.We believe in hiring the best and the brightest to help cultivate our culture of collaboration and appreciation. Apply today and explore your future at Proofpoint! #LifeAtProofpoint


Why Proofpoint?


At Proofpoint, we believe that an exceptional career experience includes a comprehensive compensation and benefits package. Here are just a few reasons you’ll love working with us:


+ Competitive compensation

+ Comprehensive benefits

+ Career success on your terms

+ Flexible work environment

+ Annual wellness and community outreach days

+ Always on recognition for your contributions

+ Global collaboration and networking opportunities


Our Culture:


Our culture is rooted in values that inspire belonging, empower purpose and drive success-every day, for everyone.


We encourage applications from individuals of all backgrounds, experiences, and perspectives. If you need accommodation during the application or interview process, please reach out to accessibility@proofpoint.com .


How to Apply


Interested? Submit your application along with any supporting information- we can’t wait to hear from you!


Consistent with Proofpoint values and applicable law, we provide the following information to promote pay transparency and equity. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets as set out below. Pay within these ranges varies and depends on job-related knowledge, skills, and experience. The actual offer will be based on the individual candidate. The range provided may represent a candidate range and may not reflect the full range for an individual tenured employee. This role may be eligible for variable compensation and/or equity. We offer a competitive benefits package, including flexible time off, a comprehensive well-being program with two paid Wellbeing Days and two paid Volunteer Days per year, plus a three-week Work from Anywhere option.


Base Pay Ranges:


SF Bay Area, New York City Metro Area:


California (excludes SF Bay Area), Colorado, Connecticut, Illinois, Washington DC Metro, Maryland, Massachusetts, New Jersey, Texas, Washington, Virginia, and Alaska:


All other cities and states excluding those listed above:


Proofpoint has been honored with six Best Places to Work Awards in 2024 by workplace culture leader Comparably, including Best Company Career Growth, Best Company Outlook, Best Global Culture, Best Engineering Teams, Best Sales Teams, and Best HR Teams.


We are the leader in human-centric cybersecurity. Half a million customers, including 87 of the Fortune 100, rely on Proofpoint to protect their organizations. We’re driven by a mission to stay ahead of bad actors and safeguard the digital world. Join us in our pursuit to defend data and protect people.


Our BRAVE Values:


At Proofpoint, we are BRAVE in everything we do, and our values aren’t just words—they shape how we work, collaborate, and grow.


We seek people who are bold enough to challenge the status quo, responsive in the face of ever-evolving threats, and accountable for delivering real impact.


We value those with a visionary mindset who anticipate what’s next and push cybersecurity forward, and we celebrate exceptional execution that ensures we continue to defend data and protect people.


Proofpoint is an equal opportunity employer, we hire without consideration to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status or disability.


Find your network, your allies, and your biggest fans. We know that work is simply better when you’re surrounded by people who inspire you—who share ideas, cheer you on, and genuinely want to see you succeed. That’s why we offer social circles, sponsored networks, and connection points across teams and time zones—to help you find your people, build your community, and thrive together.


This isn’t just a job—it’s a mission to protect people and defend data in a world that never slows down. We’re building the future of human-centric cybersecurity, and that future belongs to all of us. We take ownership, move fast, and hold ourselves accountable—because that’s what it takes to stay ahead. And we do it together, winning as one.


Be empowered to reach your full potential through meaningful challenges and personalized support—designed around you and your goals. Whether you're growing as a leader or leveling up from great to exceptional as an individual contributor, we’re here to help you get there.
Proofpoint is an equal opportunity employer, we hire without consideration to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status or disability.

About the Company

P

Proofpoint

Proofpoint, Inc. (NASDAQ:PFPT) is a leading cybersecurity company that protects organizations’ greatest assets and biggest risks: their people. With an integrated suite of cloud-based solutions, Proofpoint helps customers around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber attacks. Leading organizations of all sizes, including more than half of the Fortune 100, rely on Proofpoint to mitigate their most critical security and compliance risks across email, the cloud, social media, and the web. No one protects people, the data they create, and the digital channels they use more effectively than Proofpoint.

If you’re looking for a customer-focused, driven-to-win organization with leading-edge products, you’ll find many exciting reasons to join our team. We believe in hiring smart, motivated, problem-solvers to cultivate a culture of collaboration and appreciation. We are an international company with locations in North America, EMEA and APAC, with each location contributing to our culture.

COMPANY SIZE
2,500 to 4,999 employees
INDUSTRY
Computer/IT Services
EMPLOYEE BENEFITS
Performance Bonus, 401K, Employee Referral Program, Employee Events
FOUNDED
2002
WEBSITE
https://www.proofpoint.com