Senior Edge Security Engineer — Cloudflare & Zero Trust

United States Digital Space LLC; San Francisco (CA); Hybrid; USD 210,000 - 270,000; Full time

Job summary

United States Digital Space LLC seeks a Security Engineer to lead edge and network security strategy, owning Cloudflare-based defenses and Zero Trust rollouts. You’ll design, implement, and automate security controls at scale, partnering with infra and product teams to reduce risk and accelerate velocity.

The role emphasizes hands-on Cloudflare expertise, policy-as-code, and incident response with AI-native tooling.

Qualifications

• 10+ years hands-on security engineering experience at scale.
• Deep production-grade expertise with Cloudflare's security stack (WAF, DDoS, Bot Management, WARP, Gateway, Access).
• Strong network architecture skills across edge and cloud: TLS/mTLS, VPC, NACLs, egress controls, DDoS resilience.
• Fluency with policy-as-code, Terraform, and CI/CD-first delivery of security controls; Crossplane a plus.
• Generalist foundation across cloud security, IAM, container security, and detection engineering.
• AI-native working style with Claude Code and agentic tooling; track record of AI-assisted workflows.
• Excellent written and verbal communication; explain perimeter tradeoffs to diverse stakeholders.
• Relevant certifications (AWS/Security, Cloudflare, CKS) a plus.

Responsibilities

• Design and operate edge security stack (Cloudflare WAF, DDoS, Bot Management, WARP, Gateway, Access); tune rules against real traffic.
• Own the network security perimeter across AWS and the edge: VPC design, Network Firewall, Shield, CloudFront, NACLs, egress filtering; codified in Terraform / Crossplane.
• Develop policy-as-code patterns for WAF rules and network policies; ship changes via PRs with tests and rollback paths.
• Build detections and alerting from edge/network telemetry (Cloudflare logs, VPC Flow Logs, CloudTrail) flowing into Panther; lead incident response.
• Contribute across security engineering surface: cloud posture, container security, IAM, vulnerability mgmt, on-call.
• Operate as an AI-native engineer using Claude Code, MCP tooling, and agentic workflows.
• Prototype and ship agents, MCP servers, and LLM-assisted automations that compress work from days to minutes.

Skills

Edge security engineering

Cloudflare WAF

DDoS protection

Zero Trust

Policy-as-code

Terraform

CI/CD security

Incident response

AI-native tooling

LLM automations

Education

Tools

Cloudflare

Wiz

CrowdStrike

Panther

Tines

Terraform

Crossplane

Job description

United States Digital Space LLC seeks a Security Engineer to lead edge and network security strategy, owning Cloudflare-based defenses and Zero Trust rollouts. You’ll design, implement, and automate security controls at scale, partnering with infra and product teams to reduce risk and accelerate velocity.

The role emphasizes hands-on Cloudflare expertise, policy-as-code, and incident response with AI-native tooling.