CDN & Edge Infrastructure Engineer IRC280788

Hitachi•Dallas, TX

77d

About The Position

Lead the refactoring of AWS CloudFront-based IaC (Terraform, CloudFormation) into Cloudflare IaC modules using Terraform or Wrangler. Migrate and optimize AWS CloudFront distributions to Cloudflare CDN with equivalent or improved caching, compression, and SSL/TLS configurations. Recreate and enhance AWS WAF rules in Cloudflare WAF, ensuring parity for rate limits, geo-blocking, and custom rule groups via Terraform. Translate and deploy AWS Lambda@Edge functions into Cloudflare Workers / Edge Functions, ensuring functional equivalence and latency improvements. Validate edge routing, caching, and security behaviour post-migration using synthetic and load testing tools.

Requirements

5+ years of experience in CDN engineering, edge networking, or cloud migration roles.
AWS CloudFront, WAF, Lambda@Edge
Cloudflare CDN, WAF, Workers, Zero Trust Access
Terraform / Terragrunt for IaC (Cloudflare and AWS providers)
CI/CD systems (GitHub Actions, Jenkins, or GitLab CI)
Solid understanding of DNS architecture, SSL/TLS, caching strategies, and edge routing.
Experience in IaC-driven automation, testing, and deployment at scale.

Responsibilities

Maintain all configurations in Git-based IaC repositories with full CI/CD automation for deployments.
Develop reusable Terraform modules for Cloudflare CDN, WAF & DNS zones.
Implement environment-based configuration (Dev, Stage, Prod) with variable management, tagging, and policy enforcement.
Integrate IaC validation, linting, and compliance checks (e.g., Sentinel or OPA) into pipelines.
Establish and manage DNS Hosted Zones in Cloudflare, including domain delegation, CNAME/ALIAS flattening, and traffic routing policies.
Automate DNS record management and zone imports using Cloudflare Terraform Provider.
Migrate existing Route53 records and health checks into Cloudflare equivalents with rollback safety.
Tune CDN caching policies (cache keys, TTLs, origin shielding) to optimize global performance.
Integrate Cloudflare WAF, Bot Management, and Page Rules to ensure secure delivery of APIs and content endpoints.
Configure Real User Monitoring (RUM) and Cloudflare Analytics dashboards for performance visibility.
Implement Zero Trust principles (Access, Gateway, and DLP) for edge security enforcement.
Collaborate with DevOps, backend, and application teams to align CDN behavior with app logic and API routing.
Document migration processes, edge routing flows, and IaC module usage.
Conduct knowledge transfer sessions for operational and support teams after migration.