Cloudflare Network & Security Engineer

EPAM Systems; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

EPAM Systems Inc. seeks a Cloudflare Network & Security Engineer to implement, operate, and support enterprise Cloudflare networking and security solutions across complex environments.

You will work with customers, architects, and delivery teams to deploy secure, scalable Cloudflare services, leveraging Cloudflare One, Zero Trust, web security, and HTTP/TLS technologies.

Qualifications

• 3+ years hands-on experience implementing Cloudflare enterprise solutions.
• Customer-facing implementation and troubleshooting in enterprise networks.
• Experience deploying Zero Trust architectures and SASE concepts.
• Experience with SSO integration and identity providers.
• Knowledge of HTTP/HTTPS, TLS, DNS, caching and web security fundamentals.
• Familiarity with cloud networking concepts and Git workflows.

Responsibilities

• Deploy and configure Cloudflare One solutions for enterprise customers.
• Implement Zero Trust security policies and access controls.
• Configure Secure Web Gateway, CASB, DLP, and RBI capabilities.
• Deploy and support Cloudflare Tunnel, WARP, and Access with SSO integration.
• Configure WAF, Rate Limiting, Bot Management, and Ruleset Engine policies.
• Support DNS, proxied records, Load Balancing, and API security
• Perform migrations from traditional VPN and other security platforms.
• Troubleshoot HTTP, DNS, TLS, networking, and security incidents.
• Analyze Cloudflare headers/metadata and support onboarding tasks.
• Produce implementation and operational documentation.

Skills

Zero Trust concepts

Cloudflare products

Web security concepts

Network troubleshooting

SRE/DevOps mindset

Tools

GitHub Actions

GitLab CI

Cloudflare Workers

DNS tooling

Job description

We are seeking a Cloudflare Network & Security Engineer to implement, operate, and support enterprise Cloudflare networking and security solutions. In this role, you will work closely with customers, architects, and delivery teams to deploy secure, scalable, and resilient Cloudflare services across enterprise environments, leveraging Cloudflare One, Zero Trust, web security, and HTTP/TLS technologies.

Responsibilities

• Deploy and configure Cloudflare One solutions
• Implement Zero Trust security policies and application access controls
• Configure Secure Web Gateway, CASB, DLP, and Remote Browser Isolation capabilities
• Deploy and support Cloudflare Tunnel, WARP, and Access, including SSO/Identity Provider integration
• Configure and support WAF, Rate Limiting, Bot Management, and Ruleset Engine policies
• Configure Magic WAN and Magic Transit
• Support DNS, proxied records, Load Balancing, and API security solutions
• Perform migrations from traditional VPN, network, and security platforms
• Troubleshoot HTTP, DNS, TLS, networking, application connectivity, and security incidents
• Analyze Cloudflare-specific HTTP response headers and metadata
• Support customer onboarding and implementation activities
• Produce implementation and operational documentation

Requirements

• 3+ years of hands-on experience implementing Cloudflare enterprise solutions, including Cloudflare One, Zero Trust Network Access, Access, WARP, and Tunnel
• Customer-facing implementation and troubleshooting experience within enterprise networking environments
• Expertise in deploying Zero Trust architectures and practical experience with SASE implementations
• Experience integrating identity providers and implementing SSO-based application access
• Knowledge of HTTP/HTTPS, TLS, DNS, caching, and web security concepts
• Familiarity with cloud networking concepts
• Experience with Git-based development workflows, including GitHub Actions and GitLab CI
• Understanding of Cloudflare Workers, Snippets, WAF, Rate Limiting, Bot Management, and Ruleset Engine
• Competency in Cloudflare-specific response headers, metadata, Content Security Policy, and web caching
• Familiarity with certificates, PKI, and Server Name Indication (SNI)