Remote-Eligible Lead, Security Platform Engineering

Cloudflare; Austin (TX); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Equity plan participation

Medical, dental, and vision insurance

401(k) with company match

Flexible paid time off

Fertility & family-forming benefits

Job summary

Cloudflare is seeking a Senior Engineering leader to head the Security Platform team. You will drive the design and operation of secure, distributed systems for secrets management, PKI, and workload identity across the Cloudflare network.

You will guide architectural decisions, mentor engineers, and own the long-term roadmap with senior management support. You will balance hands-on design work with people leadership, ensuring resilience and security while enabling internal developers to use the

Qualifications

• Proven experience leading teams of engineers.
• Excellent verbal and written communication skills.
• Software development and distributed systems design expertise.
• Strong security background with focus on implementation.

Responsibilities

• Lead the Security Platform team across building and operating secure, resilient distributed systems for secrets and PKI.
• Review and sign off on designs, plans and code to ensure quality and security.
• Plan long-term roadmap and day-to-day work; mentor and develop team members.

Skills

Team leadership

Verbal & written communication

Distributed systems design

Security implementation

Go

Python

Salt

Linux/UNIX admin

HashiCorp Vault

Tools

Go

Python

Salt

HashiCorp Vault

Job description

Cloudflare is seeking a Senior Engineering leader to head the Security Platform team. You will drive the design and operation of secure, distributed systems for secrets management, PKI, and workload identity across the Cloudflare network.

You will guide architectural decisions, mentor engineers, and own the long-term roadmap with senior management support. You will balance hands-on design work with people leadership, ensuring resilience and security while enabling internal developers to use the