Remote Senior Security Platform Engineer - Secrets & PKI

VulnU; Northern (KY); Remote; USD 150,000 - 266,000; Full time

Benefits offered by this job

Flexible PTO

Equity

16 weeks parental leave

Job summary

Cloudflare is seeking a Senior Software Engineer for the Security Platform team. You will design, build, and operate secure, distributed systems for secrets and identity management across a global network.

You will work on internal PKI, machine/workload identity, and collaborate with developers to ensure secure usage of services. Ideal candidates have deep software engineering skills, a strong security mindset, and experience with cryptography, Vault/OpenBao, and TEEs.

Qualifications

• Software development and distributed systems design expertise.
• Linux/UNIX system administration proficiency.
• Strong security background with a focus on implementation, not policy/compliance.
• Cryptography background and ability to work with cryptosystems at the primitives level.
• Experience with HSMs, TPMs, or other platform TEEs (e.g. AMD SEV, Intel SGX, Apple Secure Enclave).
• Familiarity with HashiCorp Vault or OpenBao, or similar.

Responsibilities

• Build and operate secure and resilient distributed systems for secrets and key management, running across our network that spans more than 310 cities in over 120 countries.
• Strengthen/re-architect internal PKI and machine/workload identity.
• Run and support the systems we build, both in an operational sense and by helping other internal developers use them.
• participate in the On Call rotation for emergency incident response.
• Consult on the design and architecture of new systems and products to ensure they are built securely and use our services correctly.

Skills

Software development

Distributed systems

Linux/UNIX

Security

Go

Python

Salt

Tools

HashiCorp Vault

OpenBao

Job description

Cloudflare is seeking a Senior Software Engineer for the Security Platform team. You will design, build, and operate secure, distributed systems for secrets and identity management across a global network.

You will work on internal PKI, machine/workload identity, and collaborate with developers to ensure secure usage of services. Ideal candidates have deep software engineering skills, a strong security mindset, and experience with cryptography, Vault/OpenBao, and TEEs.