Site Reliability Engineer - Cloudflare & Ingress - Core Infrastructure
Listed on 2026-07-23
-
IT/Tech
Systems Engineer, SRE/Site Reliability, AWS, Cloud Computing: Infrastructure & Operations
Building the Future of Open Finance
Payward – the parent company behind Kraken, Ninja Trader, Breakout, xStocks, Payward Services and CF Benchmarks – has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.
The TeamFounded in 2011, Kraken is one of the world’s longest‑standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.
Join our engineering team as a Senior Site Reliability Engineer focused on the edge and ingress layer that fronts our platform – the systems that stand between the public internet and our services. You will own the design, hardening, and operation of our Cloudflare edge configuration and our ingress/reverse‑proxy stack, ensuring traffic reaches our applications securely, reliably, and at scale.
As a member of the SRE team, you will guarantee the availability, performance, low‑latency, security, and cost efficiency of our edge and ingress infrastructure. This is an excellent opportunity for an engineer who is passionate about edge networking, application security, load balancing, and building self‑service automation for dozens of engineering teams operating mission‑critical financial services.
You will work closely with Security Engineers, Net Ops, Platform teams, and Software Engineers to improve operational excellence for how traffic enters and moves through our environment, while mentoring other engineers and raising the bar on edge and ingress reliability practices.
The Opportunity- Own and evolve our Cloudflare edge configuration across accounts and zones, including WAF rules, custom rulesets, bot protection, and rate‑limiting policies.
- Design and maintain DNS architecture in Cloudflare, including zone delegation, record hygiene, and change management at scale.
- Implement and operate mTLS with authenticated origin pulls, private PKIs, and manage the certificate lifecycle (issuance, rotation, renewal) across Cloudflare and origin infrastructure.
- Build and support self‑service automation for edge configuration using Terraform, enabling application teams to safely manage their own WAF, DNS, and routing changes.
- Develop and operate solutions using Cloudflare Workers and R2 storage to extend edge logic and reduce origin load.
- Own the ingress and reverse‑proxy layer, including HAProxy OSS and HAProxy Fusion (enterprise), covering TLS termination, mTLS, TCP passthrough, proxy‑protocol handling, HTTP/HTTPS/FIX protocols.
- Design and manage reverse proxy topologies and load balancing across AWS Load Balancers, AWS Direct Connect, AWS Private Link, and similar solutions for hybrid on‑premises/cloud connectivity.
- Build, operate, and improve Kubernetes ingress controllers, and design/write Kubernetes operators and CRDs to automate ingress and routing configuration as code.
- Operate and extend service mesh (Istio) capabilities, including traffic management, mTLS between services, and observability of east‑west traffic.
- Partner with security to defend against OWASP‑class attack vectors, implement credential‑stuffing protection, DDoS prevention, and manage ACLs across the edge and ingress layers.
- Implement robust monitoring and alerting for edge, DNS, and ingress health to proactively detect anomalies, latency regressions, and abuse patterns.
- Lead incident response for edge/ingress‑related incidents and participate in on‑call rotations, including post‑mortems and runbook development.
- Document architecture, standards, and best practices for the edge and ingress layer, and mentor other engineers on Cloudflare and ingress operations.
- Act as the primary subject‑matter expert for Cloudflare, ingress, and edge networking, providing weekly support to engineering teams through office hours, support requests, architecture guidance, technical coaching, and hands‑on assistance to unblock…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).