Edge & Network Security Architect — Cloudflare & Zero Trust

Rozgoo; San Francisco (CA); On-site; USD 210,000 - 280,000; Full time

Benefits offered by this job

Competitive base pay

Benefits

Equity (RSUs)

Job summary

Gusto is seeking a Senior Staff Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and broader perimeter controls. You will craft scalable security architectures, tune WAF rules, defend during live events, and drive Zero Trust rollouts across the enterprise.

This role partners with infrastructure and product teams, emphasizes automation and AI-native tooling, and serves as a force multiplier for the security org.

Qualifications

• 10+ years of hands-on security engineering experience, with edge/network/perimeter focus.

Responsibilities

• Design and operate edge security stack including Cloudflare WAF and DDoS protection.
• Own perimiter security across AWS and edge with codified configs in Terraform and Crossplane.
• Develop policy-as-code for WAF rules and network policies.
• Lead incident response for perimeter and network events.
• Collaborate with infra and product teams on architectural decisions.

Skills

Edge security

Cloudflare WAF

DDoS protection

Terraform

Crossplane

Zero Trust

Automation

Incident response

Cloud security

Tools

Terraform

Crossplane

Cloudflare

Panther

CloudTrail

CloudFront

Job description

Gusto is seeking a Senior Staff Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and broader perimeter controls. You will craft scalable security architectures, tune WAF rules, defend during live events, and drive Zero Trust rollouts across the enterprise.

This role partners with infrastructure and product teams, emphasizes automation and AI-native tooling, and serves as a force multiplier for the security org.