Cloudflare Edge Security Architect

Concept Plus, LLC; Northern (KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Concept Plus is seeking a Cloudflare / Edge Security Engineer to design and integrate Cloudflare edge and security services into client OCI/Cloud@Customer environments. You will configure DNS, CDN, WAF, DDoS protections, and Zero Trust access to align with CMS TIC 3.0 and multi-cloud segmentation.

The role requires hands-on Cloudflare experience within regulated environments and OCI networking integration, with a focus on secure edge architecture and runbooks for operational readiness.

Qualifications

• Hands-on Cloudflare DNS, CDN, WAF, DDoS mitigation and Zero Trust/access experience.
• Understanding secure edge and Zero Trust architecture patterns.
• Working knowledge of OCI networking constructs for integration.
• Experience implementing web/application security controls in regulated environments.
• Familiarity with FedRAMP High CMS ARS and NIST 800-53 r5.

Responsibilities

• Design Cloudflare-based DNS, CDN, WAF, DDoS, and Zero Trust configurations for OCI.
• Integrate Cloudflare with OCI networking (FastConnect, DRG, private endpoints, DNS zones, routing).
• Align edge/security design with CMS TIC 3.0, Zero Trust, and multi-cloud segmentation requirements.
• Produce runbooks, configuration guidance, and operational readiness support.
• Partner with the Cloud Network Engineer and Security/Compliance lead on secure edge architecture.

Skills

Cloudflare experience

Zero Trust architecture

OCI networking

Web security controls

FedRAMP/NIST knowledge

Job description

Concept Plus is seeking a Cloudflare / Edge Security Engineer to design and integrate Cloudflare edge and security services into client OCI/Cloud@Customer environments. You will configure DNS, CDN, WAF, DDoS protections, and Zero Trust access to align with CMS TIC 3.0 and multi-cloud segmentation.

The role requires hands-on Cloudflare experience within regulated environments and OCI networking integration, with a focus on secure edge architecture and runbooks for operational readiness.