Senior Software Engineer - Security Platform

Cloudflare•Washington, DC

3d•$150,000 - $266,000

About The Position

The Security Platform team is an infrastructure and developer tools group that builds and operates powerful, resilient, and secure infrastructure and systems. These systems enable other engineering teams to deliver products efficiently and securely. The team is responsible for secrets management, internal certificate authorities and PKI, machine and workload identity, and related services; it focuses on infrastructure engineering and software development rather than policy, audit, or compliance. In this role, you will build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. The work focuses on strengthening and re-architecting internal PKI and machine/workload identity. You will operate and support the systems, help internal developers use them, participate in emergency incident-response on-call rotations, and advise on system and product design and architecture so new systems are built securely and integrate correctly with the team’s services. The role is available in Atlanta, Austin, Denver, New York, San Francisco, Seattle, Washington, DC, and Canada. Compensation depends on work location. The role is eligible for Cloudflare’s equity plan. Applications are accepted until December 25, 2026.

Requirements

Experience designing, building, and maintaining production software in Go, C, C++, Rust, or comparable languages, with systems-oriented engineering experience.
Experience building and operating critical production services or infrastructure, including debugging failures, recovering service, and improving reliability.
Ability to reason about distributed systems and their failure modes.
Hands-on experience administering and troubleshooting Linux/UNIX systems in production.
Experience developing or operating software or systems that provide security capabilities or enforce security boundaries; a dedicated security job title is not required.
Working understanding of symmetric and asymmetric cryptography and PKI sufficient to make sound implementation choices using established libraries and protocols; designing new cryptographic algorithms is not required.

Nice To Haves

Experience with secrets management, key management, internal certificate authorities/PKI, or machine and workload identity.
Experience managing the lifecycle of keys, certificates, or credentials, including issuance, rotation, expiration, and revocation.
Familiarity with HashiCorp Vault, OpenBao, or similar systems.
Experience with hardware-backed security, such as HSMs, TPMs, or trusted execution environments.
Familiarity with Go, Python, or Salt.
Contributions to open-source security, systems software, or distributed systems projects.

Responsibilities

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network.
Strengthen and re-architect internal PKI and machine/workload identity systems.
Run and support the systems the team builds, including operational support and helping internal developers use them.
Participate in the on-call rotation for emergency incident response.
Consult on the design and architecture of new systems and products to ensure they are built securely and use the team’s services correctly.

Benefits

Medical/Rx insurance
Dental insurance
Vision insurance
Flexible spending accounts
Commuter spending accounts
Fertility and family-forming benefits
On-demand mental health support and Employee Assistance Program
Global travel medical insurance
Short- and long-term disability insurance
Life and accident insurance
401(k) retirement savings plan
Employee stock participation plan
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
Equity plan participation