Principal Resident Consultant, Professional Services (Application Security)

Cloudflare; Deutschland; Hybrid; EUR 125,000 - 181,000; Full time

Job summary

Cloudflare is seeking a Principal Resident Consultant, Professional Services to act as a hands-on technical expert embedded with a customer’s team. You will own complex engagements, architect solutions, and mentor staff while aligning Cloudflare services with strategic business outcomes.

This senior role emphasizes autonomy, architectural decision-making, and collaboration with executives to deliver scalable, secure Internet solutions across large enterprise environments.

Qualifications

• 15+ years of experience in a customer-facing technical role.
• Hands-on expertise with WAF, Bot Management, API Gateway, DDoS protection, and global traffic optimization.
• Strong networking knowledge (OSI model, TCP/IP, DNS, TLS) and security architecture design.
• Experience mentoring teams and leading technical workshops.
• Experience with infrastructure-as-code tools and scripting (Terraform, Python, JavaScript).

Responsibilities

• Embed as a trusted, embedded member of the customer's technical team and lead technical transformations.
• Design, configure, and optimize Cloudflare solutions within customer environments.
• Develop automation scripts, prototypes, and troubleshoot issues in real time.
• Provide proactive architectural guidance and roadmaps aligned with business goals.
• Lead workshops and knowledge transfer, documenting decisions and runbooks.

Skills

WAF tuning

Bot Management

API Gateway

DDoS protection

Rate Limiting

Performance optimization

Security architectures

Networking

Leadership

Mentorship

Python scripting

JavaScript scripting

Terraform

Tools

Terraform

Job description

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today thecompany runs one of the world’s largest networks that powers millions of websitesand other Internet properties for customers ranging from individual bloggers toSMBs to Fortune 500 companies. Cloudflare protects and accelerates anyInternet application online without adding hardware, installing software, orchanging a line of code. Internet properties powered by Cloudflare all have webtraffic routed through its intelligent global network, which gets smarter withevery request. As a result, they see significant improvement in performanceand a decrease in spam and other attacks. Cloudflare was named toEntrepreneur Magazine’sTop Company Cultures list and ranked among the World’sMostInnovativeCompaniesby Fast Company. At Cloudflare, we’re not looking forpeople who wait for a polished roadmap; we’re looking for the builders who seethe cracks in the Internet that everyone else has simply learned to live with.We value candidates who have the instinct to spot a “normalized” problem andthe AI-native curiosity to create a solution using the latest tools. Ourculture is built on iteration, leveraging AI to ship faster today to make itbetter tomorrow, while ensuring that every improvement, no matter how small,is shared across the team to lift everyone up. If you’re the type of personwho values curiosity over bureaucracy, and that AI is a partner in solvingtough problems to keep the Internet moving forward, you’ll fit right in.

Available Location

Singapore

About the Role

Cloudflare’s Principal Resident Consultant, Professional Services providescustomers with a dedicated, hands-on technical expert embedded directlywithin their environment. This is not a traditional support or purelyadvisory engagement—it is a staff‑augmentation model where you act as anextension of the customer’s team, taking the lead in managing, optimizing,and evolving their Cloudflare solutions. As a Principal ResidentConsultant, you are a recognized subject‑matter expert in yourspecialization and a trusted advisor to both the customer and Cloudflareleadership. You will own the most complex, high‑stakes customerengagements, and contribute to the evolution of Cloudflare's servicemethodologies and offerings. You operate with a high degree of autonomy,make architectural decisions that impact mission‑critical infrastructure,and partner with executive stakeholders to align technical outcomeswith business objectives. This role is ideal for senior technologists whohave a proven track record of owning end‑to‑end customer transformations,leading through influence, and scaling expertise across teams.

What You Will Do

Embed & Integrate

• Become a trusted, embedded member of the customer’s technical team, operating withintheir tools, processes, and change‑management frameworks.
• Follow the customer’s change‑management process for all hands‑on modifications,ensuring risk mitigation and operational continuity.

Hands‑On Execution

• Design, configure, and optimize Cloudflare solutions directly within the customerenvironment.
• Implement changes, build prototypes, develop automation scripts, and troubleshootissues in real time.

Strategic Advisory & Architecture

• Provide proactive architectural guidance, roadmap alignment, and best‑practicerecommendations.
• Produce Solution Designs, HLDs, LLDs, databuilds, procedures, test plans, deploymentplans, migration plans, as‑builts, and other artifacts necessary for delivery andsmooth handoff.

Workshops & Knowledge Transfer

• Lead technical workshops, knowledge‑transfer sessions, and special‑event preparation(e.g., product launches, traffic events, security drills, quarterly businessreviews).
• Ensure continuity by documenting decisions, runbooks, and configurations in thecustomer’s collaborative workspace.

Customer Advocacy & Liaison

• Act as the voice of the customer within Cloudflare, surfacing product gaps,feature requests, and escalation items to Engineering, Support, and Product.
• Partner closely with the Account Executive, Solutions Engineer,Customer Success Manager, Delivery Leaders and other stakeholders to align onaccount strategy and expansion opportunities.

Experience & Skills Core Requirements

15+ years of experience in a customer‑facing technical role.

• Applications — Advanced tuning of WAF, Bot Management, API Gateway, DDoSprotection, Rate Limiting, and performance optimization for global webproperties. Experience designing security architectures for large‑scale,multi‑zone deployments.
• Network — Hands‑on management of Magic Transit, BYOIP, complex L3/L4 routing,DDoS resilience, and low‑latency global connectivity design. Experience withnetwork transformations and MPLS/SD‑WAN migrations.
• Leadership & Mentorship — Demonstrated experience mentoring junior teammembers, leading technical workshops, and contributing to the development ofservice methodologies, best practices, and reusable assets.
• Strong Networking Foundation — Expert‑level understanding of the OSI model,TCP/IP, TLS, DNS, and HTTP.
• Hands‑On Technical Skills — Demonstrated ability to implement, configure,and troubleshoot complex solutions. Experience with infrastructure‑as‑codetools (e.g., Terraform) and scripting (e.g., Python, JavaScript, Bash)is highly desirable.
• Project & Program Management — Ability to manage multiple competingpriorities, work to deadlines, and deliver results in ambiguous orfast‑moving environments. Experience scoping and estimating complexengagements.
• Communication & Executive Presence — Exceptional verbal and writtencommunication skills. Ability to translate complex technical concepts forboth technical and executive audience.
• Regional Experience — Experience working with enterprise customers in APJC.Understanding of regional compliance requirements, business culture, andtechnical ecosystems.

Preferred Qualifications

• Experience in heavily regulated industries (Public Sector, Financial Services,Healthcare) or complex legacy‑migration environments.
• Relevant industry certifications: CISSP, CCIE, AWS, GCP, Azure certifications,or equivalent.
• Familiarity with Agile methodologies and enterprise change‑managementprocesses.
• Familiarity with Zero Trust / SASE — Securing distributed workforces withAccess, Gateway, CASB, RBI, and DLP. Proven experience implementing ZeroTrust architectures at enterprise scale.
• Prior experience with Cloudflare’s product suite and edge‑network ecosystem.

What Makes Cloudflare Special?

We’re not just a highly ambitious, large‑scale technology company. We’re ahighly ambitious, large‑scale technology company with a soul. Fundamental toour mission to help build a better Internet is protecting the free and openInternet. ProjectGalileo : Since 2014, we’ve equipped more than 2,400journalism and civil society organizations in 111 countries with powerful toolsto defend themselves against attacks that would otherwise censor their work,technology already used by Cloudflare’s enterprise customers—at no cost.Athenian Project : In 2017, we created the Athenian Project to ensure thatstate and local governments have the highest level of protection and reliabilityfor free, so that their constituents have access to election information andvoter registration. Since the project, we’ve provided services to more than425 local government election websites in 33 states. 1.1.1.1 : We released1.1.1.1 to help fix the foundation of the Internet by building a faster,more secure and privacy‑centric public DNS resolver. This is availablepublicly for everyone to use - it is the first consumer‑focused serviceCloudflare has ever released. Here’s the deal - we don’t store client IPaddresses never, ever. We will continue to abide by our privacy commitmentand ensure that no user data is sold to advertisers or used to targetconsumers.

Sound like something you’d like to be a part of? We’d love to hear from you! Pleasenote that applicants who progress to the offer stage of the interview process may beasked to attend an in‑person interview within one of the Cloudflare Offices orCloudflare Hubs. More details about this will be available at that stage of theinterview process. This position may require access to information protectedunder U.S. export control laws, including the U.S. Export AdministrationRegulations. Please note that any offer of employment may be conditioned onyour authorization to receive software or technology controlled under theseU.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer. We are committedto providing equal employment opportunity for all people and place great valuein both diversity and inclusiveness. All qualified applicants will beconsidered for employment without regard to their, or any other person's,perceived or actual race, color, religion, sex, gender, gender identity,gender expression, sexual orientation, national origin, ancestry, citizenship,age, physical or mental disability, medical condition, family care statusor any other basis protected by law. We are an AA/Veterans/Disabled Employer.Cloudflare provides reasonable accommodations to qualified individuals withdisabilities. Please tell us if you require a reasonable accommodation toapply for a job. Examples of reasonable accommodations include, but arenot limited to, changing the application process, providing documents in analternate format, using a sign language interpreter, or using specializedequipment. If you require a reasonable accommodation to apply for a job,please contact us via e‑mail at [e-mail] or via mail at 101 TownsendSt. SanFrancisco,CA94107.