Staff Cloud Software Engineer - Edge, CDN & WAF

Company OverviewIntuit is the global financial technology platform that powers prosperity for the people and communities we serve. With tens of millions of customers worldwide using products such as TurboTax, Credit Karma, QuickBooks, and Mailchimp, we believe that everyone should have the opportunity to prosper. We never stop working to find new, innovative ways to make that possible.Job OverviewIntuit is the global financial technology platform that powers prosperity for the people and communities we serve. Behind our public-facing products — TurboTax, Credit Karma, QuickBooks, and Mailchimp — is an edge and perimeter layer (CDN, WAF, DNS, and SSL/TLS) that protects and accelerates traffic for approximately 100 million customers.We are hiring a Staff Software Engineer with deep Akamai CDN & WAF expertise, a strong networking foundation, and hands-on software engineering skills. Sitting within Cloud Engineering & Operations, this role is integral to protecting and accelerating Intuit's public-facing traffic and to keeping critical network services always available to developers. Most importantly, you will help build and manage a CDN/WAF "paved road" that automatically onboards public endpoints to Akamai and recommends optimized edge configurations to development teams. You will design self-service applications and engineer, deploy, and support the corresponding APIs and UIs. As a Staff engineer, you will not just execute this work manually but direct, orchestrate, and govern AI agents to build and operate it faster, accountable for the quality and reliability of everything you and those agents produce.ResponsibilitiesBuild the CDN/WAF paved road, automate onboarding of public endpoints to Akamai, with tooling that recommends and optimizes edge/CDN configurations for development teamsEngineer & tune edge security policies, WAF, bot-management, client-reputation, and rate-control policies (Akamai Kona / App & API Protector and AWS WAFv2), balancing security with false-positive and blast-radius riskDesign self-service platforms, engineer and support self-service applications, APIs, and UIs for edge, DNS, and certificate workflowsOwn DNS & certificate lifecycle, support and improve DNS, SSL/TLS certificate lifecycle (ACM/Venafi/DigiCert, including mTLS), CDN, and network-connectivity solutionsTroubleshoot the full packet path, diagnose connectivity issues across the edge and cloud network (CDN origin/SiteShield, DNS resolution, TLS, Transit Gateway routing), with the ability to reason about the full path and analyze capturesAutomate compliance & cost, engineer policies to report or auto-remediate compliance and cost issues, and drive proactive, continuous performance tuning of Cloud Platform servicesEncode knowledge into agents, build agentic and self-service tooling that turns team knowledge into reusable patterns so standards travel with the automationProvide 24x7 incident response for critical edge/Platform Services, including off-hours migration and cutover windowsPartner with vendors & internal teams, work closely with vendors (e.g., Akamai) and internal development teams to define operational support models and escalation pathsMentor & influence, stay abreast of new technologies, recommend best practices, and mentor engineers, including coaching on how to break work into pieces that agents can execute reliablyQualificationsBS in Computer Science or equivalent work-related experienceDeep hands-on Akamai expertise, Property Manager/Ion, Kona / App & API Protector (WAF), Bot Manager, Client Reputation, CPS certificates, EdgeWorkers, SiteShield, and the PAPI/{OPEN} APIsStrong networking foundation and troubleshooting of TCP/IP, DNS (Route 53, delegation, CNAME chains, split-horizon), SSL/TLS and mTLS, CDN origin/edge routing, VPN, AWS Transit Gateway/VPC routing, BGP, and SSHA software engineer who can build, not just operate, proficient in scripting/development (Full Stack preferred), specifically Python, Golang, React, and Java, and building and owning REST APIs, UIs, and MSaaS servicesBackground with Infrastructure as Code (CloudFormation, AWS CDK, Terraform), deployment automation (CodeBuild, Jenkins), and an understanding of GitOpsHands-on AWS experience (API Gateway, CloudFront, ACM, ALB/NLB, Lambda, WAFv2, IAM); knowledge of Google GCP and Microsoft Azure preferredFluent in AI agent development and orchestration, able to build agentic/self-service tooling (e.g., MCP servers and skills) and to review AI-generated output to the same quality bar as peer codeExperience operating a production support/on-call surface with formal change management, incident RCA, and clear customer-facing communicationStaff-level candidates additionally: own the technical vision for a domain or system across multiple teams, engineer closed-loop agentic workflows that reduce manual toil, and drive operational excellence and quality guardrails beyond their own teamIntuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender. The expected base pay range for this position is: San Diego $188,500 - $255,000