Cloudflare network & security engineer

EPAM; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation opportunities

Certifications (GCP, Azure, AWS)

Employee Stock Purchase Plan

Medical & family care

Global mobility

Job summary

EPAM ищет старшего инженера по сетям Cloudflare и безопасности для внедрения и поддержки облачных решений Cloudflare в корпоративной среде. Вы будете работать с заказчиками, архитекторами и командами реализации для развёртывания безопасных, масштабируемых сервисов Cloudflare.

Требуется 5+ лет опыта реализации решений Cloudflare и знаний в области сетевых технологий и веб-безопасности. Возможен гибридный график, с международной мобилизацией и поддержкой удаленной работы.

Qualifications

• Опыт внедрения решений Cloudflare в рамках проектов для клиентов.
• Опыт работы с HTTP/HTTPS, TLS, DNS, кэширование и веб-безопасность.

Responsibilities

• Развертывать и настраивать Cloudflare One.
• Внедрять политики Zero Trust и управление доступом к приложениям.
• Настраивать Secure Web Gateway, CASB, DLP и Remote Browser Isolation.
• Развертывать Cloudflare Tunnel, WARP и Access, включая SSO/Identity Provider.
• Настраивать WAF, ограничение скорости, BOT-управление и Ruleset Engine.
• Развертывать Magic WAN и Magic Transit.
• Поддерживать DNS, проксированные записи, балансировку нагрузки и защиту API.
• Переводить миграции с традиционных VPN, сетевых и безопасность платформ.
• Улаживать инциденты и анализировать заголовки HTTP.
• Поддерживать внедрение и документацию проектов.

Skills

Опыт внедрения Cloudflare Enterprise

Сетевые технологии предприятия

Zero Trust / SASE

Cloudflare Tunnel / WARP / Access

SSO / Identity Providers

Облачная сетевой концепции

Git-воркфлоу

Cloudflare One / ZTNA / WARP / Tunnel

Secure Web Gateway / CASB / DLP

WAF / Rate Limiting / Bot Management

DNS / Proxied Records / Load Balancing

Magic WAN / Magic Transit / Workers

Tools

Git-based workflows

Job description

Описание

We are seeking a Senior Cloudflare Network & Security Engineer to implement, operate, and support Cloudflare enterprise networking and security solutions. In this role, you will work closely with customers, architects, and delivery teams to deploy secure, scalable, and resilient Cloudflare services across enterprise environments.

Задачи

• Deploy and configure Cloudflare One solutions
• Implement Zero Trust security policies and application access controls
• Configure Secure Web Gateway, CASB, DLP, and Remote Browser Isolation capabilities
• Deploy and support Cloudflare Tunnel, WARP, and Access, including SSO/Identity Provider integration
• Configure and support WAF, Rate Limiting, Bot Management, and Ruleset Engine policies
• Configure Magic WAN and Magic Transit
• Support DNS, proxied records, Load Balancing, and API security solutions
• Perform migrations from traditional VPN, network, and security platforms
• Troubleshoot HTTP, DNS, TLS, networking, application connectivity, and security incidents
• Analyze Cloudflare-specific HTTP response headers and metadata
• Support customer onboarding and implementation activities
• Produce implementation and operational documentation while collaborating with architects and customer teams during Cloudflare projects

Требования

• 5+ years of demonstrated hands‑on experience implementing Cloudflare enterprise solutions, including customer‑facing implementation and troubleshooting
• Expertise in enterprise networking and web technologies, including HTTP/HTTPS, TLS, DNS, caching, and web security concepts
• Experience deploying Zero Trust architectures and practical SASE implementations
• Experience implementing Cloudflare Tunnel, WARP, and Access
• Experience integrating identity providers and implementing SSO-based application access
• Familiarity with cloud networking concepts
• Experience with Git-based development workflows
• Knowledge of Cloudflare One, ZTNA, Cloudflare Access, WARP, and Tunnel
• Proficiency in Secure Web Gateway, CASB, DLP, and Remote Browser Isolation
• Skills in WAF, Rate Limiting, Bot Management, and Ruleset Engine
• Knowledge of DNS, Proxied Records, Load Balancing, and API Shield
• Understanding of Magic WAN, Magic Transit, Workers, and Snippets

Условия

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events
• Leadership development, career advising, soft skills and well‑being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts in local language schools, including online courses for the Kazakh language
• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership