Network Security Engineer

Job Description

Cloudflare Security Engineer

Location: Remote

Duration: Contract (6+ months, extension likely)

Start Date: Immediate Start

About the Opportunity

We are seeking an experienced Cloudflare Security Engineer to join an enterprise client on an urgent engagement. You will design, implement, and operate the client’s Cloudflare security controls. You’ll work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users. This is a hands-on role for an engineer who can start contributing in the first week.

Key Responsibilities

• Configure, tune, and maintain Cloudflare WAF managed and custom rulesets, rate limiting, and Bot Management to stop application-layer attacks while keeping false positives low.
• Manage DDoS protection, DNS, SSL/TLS settings, certificates, and origin security across multiple zones.
• Implement and support Cloudflare Zero Trust, including Access, Gateway, and Tunnel, for secure user and application access.
• Secure APIs with API Shield, schema validation, and mTLS where applicable.
• Manage Cloudflare configuration as code with Terraform and the Cloudflare API, following change-control standards.
• Integrate Cloudflare logs into the client’s SIEM (Logpush to Splunk, Sentinel, or similar) and support detection, investigation, and incident response.
• Lead or support migrations of applications and zones onto Cloudflare from legacy CDN, WAF, or VPN solutions.
• Produce clear documentation, runbooks, and recommendations, and communicate effectively with technical and non-technical stakeholders.

Required Qualifications

• 5+ years in security engineering, network security, or infrastructure security roles.
• 2+ years of recent, hands-on Cloudflare enterprise experience, including WAF, DDoS, Bot Management, DNS, and SSL/TLS.
• Working knowledge of Cloudflare Zero Trust (Access, Gateway, Tunnel).
• Experience with Terraform or other infrastructure-as-code tools for managing edge and security configuration.
• Solid understanding of TLS, DNS, TCP/IP, and common web attack techniques (OWASP Top 10).
• Experience supporting production environments, including incident troubleshooting under pressure.
• Ability to work independently with minimal ramp-up time.

Preferred Qualifications

• Experience migrating from Akamai, Imperva, F5, Fastly, or AWS WAF to Cloudflare.
• Cloudflare Workers or scripting experience (JavaScript, Python, Bash).
• SIEM/SOC integration experience.
• Background in regulated industries such as financial services, healthcare, or legal.
• Relevant certifications (e.g., Security+, CISSP, CCSP, cloud security certifications).