<p><p><b>Job Description :</b><br/><br/>We are seeking a skilled IPsec/Linux Network Engineer with strong expertise in secure networking protocols and Linux-based development.
The ideal candidate will be responsible for implementing, optimizing, and troubleshooting IPsec-based VPN and high-performance networking solutions, including hardware offloading and cryptographic Responsibilities :</b></p><p><br/>- Design, develop, and optimize IPsec solutions on Linux platforms.<br/><br/>- Implement and troubleshoot IPsec architecture :<br/></p><p><br/></p><p>1.
ESP/AH protocols<br/></p><p><br/></p><p>2.
Tunnel vs.
Transport modes<br/></p><p><br/></p><p>3.
IKEv1/IKEv2 key exchange mechanisms<br/></p><p><br/></p><p>4.
Authentication methods (Certificates, PSK, EAP)<br/></p><p><br/></p><p>5.
PKI and certificate management<br/></p><p><br/></p><p>6.
TLS/DTLS for secure communication<br/><br/>- Work with IPsec stacks such as strongSwan, libreswan, and Linux ip xfrm.<br/><br/>- Collaborate on Linux networking and Netfilter/iptables/nftables development.<br/><br/>- Integrate DPDK cryptodev or cryptodev-linux libraries for cryptographic acceleration.<br/><br/>- Offload IPsec encryption/decryption to hardware crypto accelerators for high-performance IPsec data planes.<br/><br/>- Debug, profile, and resolve performance and security issues in networking Skills & Experience :</b></p><p><br/>- Strong understanding of IPsec protocols and architecture (ESP, AH, IKEv1, IKEv2, PKI, TLS/DTLS).<br/><br/>- Hands-on experience with IPsec stacks (strongSwan, libreswan, ip xfrm).<br/><br/>- Good knowledge of Linux networking internals, Netfilter, and routing concepts.<br/><br/>- Working knowledge of DPDK cryptodev or cryptodev-linux libraries.<br/><br/>- Experience in IPsec encryption/decryption offloading using hardware crypto accelerators.<br/><br/>- Solid programming/debugging background with C/C++ in Linux environments to Have :</b></p><p><br/>- Kernel-level networking or driver development experience.<br/><br/>- Familiarity with SD-WAN solutions and VPN configuration.<br/><br/>- Knowledge of security compliance standards (FIPS, Common :</b></p><p><br/>- Bachelors or Masters degree in Computer Science, Electronics, or related field.</p><br/></p> (ref:hirist.tech)