Cloudflare Security Engineer – Zero Trust & WAF Expert

Tiger Advisory; United States; In loco; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Tiger Advisory is seeking an experienced Cloudflare Security Engineer to design, implement, and operate the client’s Cloudflare security controls on an urgent engagement. You will work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users.

This is a hands-on role requiring quick contribution in the first week. You will configure WAF rules, manage DDoS protection, DNS, TLS, and Zero Trust, and support migrations from legacy

Competenze

• 5+ years in security engineering, infrastructure security, or related roles.
• 2+ years hands-on Cloudflare enterprise experience (WAF, DDoS, Bot Management, DNS, TLS).
• Familiarity with Cloudflare Zero Trust (Access, Gateway, Tunnel).
• Experience with IaC tools to manage edge/security configurations.

Mansioni

• Configure, tune, and maintain Cloudflare WAF rulesets and bot management.
• Manage DDoS protection, DNS, SSL/TLS, and certificate handling across zones.
• Implement Cloudflare Zero Trust for secure user and app access.
• Secure APIs with API Shield and mTLS where applicable.
• Manage Cloudflare config as code with Terraform and API.
• Integrate Cloudflare logs with SIEM (e.g., Splunk, Sentinel).
• Lead or support migrations of apps/zones to Cloudflare from legacy solutions.
• Produce documentation, runbooks, and communicate with stakeholders.

Conoscenze

Security engineering

Network security

Incident response

Independent work

Formazione

Security+ / CISSP / CCSP

Strumenti

Terraform

Cloudflare

Cloudflare API

WAF / DDoS tooling

Descrizione del lavoro

Tiger Advisory is seeking an experienced Cloudflare Security Engineer to design, implement, and operate the client’s Cloudflare security controls on an urgent engagement. You will work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users.

This is a hands-on role requiring quick contribution in the first week. You will configure WAF rules, manage DDoS protection, DNS, TLS, and Zero Trust, and support migrations from legacy