TL;DR

Senior Systems Engineer (Cybersecurity): Building and optimizing high-performance global edge network data plane services and control plane APIs for a secure internet gateway, with an accent on inspecting, filtering, and blocking device requests. Focus on designing and implementing secure, highly-available distributed systems and mastering low-level networking protocols.

Location: Hybrid, must be based in Sydney, Australia

Company

Cloudflare is building a better Internet by running one of the world’s largest networks that protects and accelerates millions of websites and other Internet properties.

What you will do

  • Build features within Gateway, focusing on a high-performance global edge network data plane services.
  • Contribute to control plane APIs that configure the edge services.
  • Develop a forward-proxy service for inspecting, filtering, and blocking device requests based on configured policies.
  • Create a deployable forward-proxy for securing IaaC workloads by inspecting and filtering cloud API traffic.
  • Build microservices for configuring, managing, and observing organizational devices and their traffic.

Requirements

  • Programming experience in Rust, C++, or similar low-level languages.
  • Strong grasp of networking protocols in Layers 3-7 of the OSI Model.
  • Solid understanding of HTTP protocols, including experience with HTTP/2.
  • Experience in designing and implementing secure and highly-available distributed systems.
  • Basic understanding of software security and encryption.
  • English: B2 required

Nice to have

  • Programming experience in Go and/or Typescript.
  • Experience with HTTP/3.

Culture & Benefits

  • Join a global team of bright, hard-working, and supportive engineers.
  • Opportunity to work on problems of massive scale and significance, shaping the future of the Internet.
  • Commitment to building a diverse and inclusive team.
  • Support for free and open Internet through initiatives like Project Galileo and Athenian Project.
  • Focus on privacy with services like 1.1.1.1, ensuring no user data is sold.