Systems Engineer - Global Resource Management (Data Residency)

Cloudflare•Austin, TX

4d•Hybrid

About The Position

Cloudflare operates one of the world's largest networks, processing millions of requests per second across 300+ cities. Today, customers can localize where their traffic is processed, but their configuration data, logs, and cryptographic keys still live in centralized datacenters. Data Residency Architecture (DRA) closes that gap. It extends data residency from the data plane across every layer of how Cloudflare stores, processes, and protects customer data. Customers get the ability to keep their data where their laws say it should be. DRA isn't a separate network or an isolated fork. It's the same Cloudflare, with cryptographic and architectural controls ensuring customer data stays within the regions a customer chooses. The program spans multiple pillars, from regional storage and post-quantum cryptography to logging pipeline expansion and product onboarding, with multiple engineering teams working in parallel. You'll join a small, high-autonomy team within this larger program. Your primary focus is building the customer-facing and internal experience for DRA: how customers create regionalized accounts, how API requests route to regional control planes, how the dashboard adapts to per-account data residency, and how Cloudflare's internal teams provision and manage it all. The nature of a cross-cutting program means you won't stay in one lane. You'll integrate with teams building the regional storage orchestrator, the cryptographic key layer, and the data pipeline infrastructure. The scope is wide, the team is small, and the decisions you make will shape how this system works at scale.

Requirements

3+ years of professional software engineering experience building production systems at scale.
Proficiency in Go. Our backend services and core platform are written in Go.
Comfort or willingness to work in TypeScript. Our control plane uses Cloudflare Workers (TypeScript), and the dashboard is a TypeScript application.
Experience designing and building REST APIs. You understand routing, authentication, request lifecycle, and how frontends consume distributed backends.
Comfort with distributed systems tradeoffs — data locality, replication, consistency models, and the latency implications of geographically distributed infrastructure. You don't need to have designed a sharded database, but you should be able to reason about why it matters that a customer's data is in Frankfurt and not Portland.
Ability to work across team boundaries. DRA spans nearly every engineering organization at Cloudflare. You'll need to navigate ambiguity, communicate technical tradeoffs clearly, and drive alignment with engineers you don't share a standup with.

Nice To Haves

Experience with data residency, sovereignty, or compliance engineering (GDPR, EU Data Act, EUCS, FedRAMP, or equivalent regulatory frameworks).
Familiarity with edge computing platforms such as Cloudflare Workers, Durable Objects, or similar serverless/edge-native runtimes.
Familiarity with PostgreSQL, ClickHouse, or SQLite in production environments.

Responsibilities

Regional API Routing - Build per-account API hostname generation and routing so that customer requests terminate in their chosen country, integrating with Cloudflare's Data Localization Suite and edge API gateway.
Dashboard Integration - Modify the Cloudflare dashboard so that API calls route through regional endpoints while surfacing clear regional indicators to the customer.
Account Creation & Provisioning - Build the account creation flow that captures country/region selection and integrates with the Control Plane Platform orchestrator to provision per-account regional storage and configuration.
Internal Tooling - Build admin tooling (provisioning integrations, billing shims, operational dashboards) so that support, sales, and finance teams can manage DRA accounts without violating residency constraints.
Cross-Team Integration - Work across the DRA program to integrate with regional storage, cryptographic key management, and logging infrastructure built by other teams.
Migration & Self-Service - Help design the path from manual provisioning (MVP) to dashboard self-service, and eventually tooling that migrates existing enterprise customers into DRA.

Benefits

Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave