🛠 Tech Stack

💼 About This Role

You'll own the architecture and delivery of Securly's DNS-over-HTTPS (DoH) resolver, a production-grade identity-aware DNS service for millions of students on managed Chromebooks. Your work will directly impact the simplification of Securly's SmartPAC identity architecture, potentially collapsing complex signaling that has been a source of reliability issues. This role offers ownership of a critical infrastructure project with minimal oversight.

🎯 What You'll Do

• Architect and build a production-grade DoH resolver in Go
• Implement identity extraction from Chrome URL template variables
• Build an Unbound plugin with filtering business logic
• Own TLS termination and certificate provisioning
• Lead POC and production hardening phases

📋 Requirements

• Go (Golang) expert-level, 5+ years production proficiency
• DNS protocol architecture including RFC 1035, recursive vs. authoritative resolution, DNSSEC, DNS wire format
• DNS-over-HTTPS (RFC 8484) protocol, HTTP/2 transport, application/dns-message media type
• Redis data structures, pipeline usage, performance characteristics

✨ Nice to Have

• AWS (CloudFormation, NLB, ASG, Route53) experience
• Unbound DNS server operational or module-level experience
• Understanding of SmartPAC / PAC-based proxy architecture

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Technical Screen· 45 min
2. 2System Design Interview· 60 min
3. 3Leadership Panel· 45 min