Software Engineer - Security Platform

About the Company

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.

Our global network learns with every request, delivering significant performance improvements and reducing spam and attacks.

Any of Austin, Denver, Atlanta, Washington DC, Seattle, New York, Toronto (Canada) preferred; other locations in North America also possible.

The Security Platform team is an infrastructure/developer‑tools group tasked with building and operating powerful, resilient, and secure infrastructure and systems that enable other engineering teams to deliver products to customers efficiently and securely. We are responsible for secrets management, internal certificate authorities/PKI, machine and workload identity, and more. We are an infrastructure engineering/software development team, not a policy, audit, or compliance team.

You’ll build and operate secure and resilient distributed systems for secrets and key management, running across our network that spans more than 310 cities in over 120 countries. Your focus will be strengthening and re‑architecting internal PKI and machine/workload identity. You’ll run and support these systems operationally, help other developers use them, and consult on the design and architecture of new systems and products to ensure security and correct service usage.

• Software development and distributed systems design expertise.
• Strong security background with a focus on implementation, not policy or compliance.

• Track record of contributing to open‑source security or distributed systems projects.
• Cryptography background and ability to work with cryptosystems at the primitives level.
• Experience with HSMs, TPMs, or other platform TEEs (e.g., AMD SEV, Intel SGX, Apple Secure Enclave).
• Familiarity with Hashi Corp Vault or Open Bao, or similar.
• Linux/UNIX system administration proficiency.
• Familiarity with Go and/or Python + Salt specifically.

This role is eligible to participate in Cloudflare’s equity plan.

Cloudflare offers a complete package of benefits and programs to support you and your family, including health, dental, vision, flexible spending accounts, childcare support, mental health resources, and global travel medical insurance. Additional financial benefits include disability insurance, life and accident insurance, 401(k) retirement savings, and an employee stock participation plan. Time off includes flexible paid vacation, sick leave, parental and bereavement leave, and special leave programs.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.

We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.