Senior Edge Systems Engineer - Linux & Networking

Cloudflare; Denver (CO); On-site; USD 150,000 - 230,000; Full time

Job summary

Cloudflare in Denver is seeking a Senior Systems Engineer to hands-on build the Linux-based edge runtime and the distributed control plane that connect customer sites to Cloudflare.

You will work across low-level systems, distributed services, and API design while providing technical leadership for major initiatives. Our light-branch, heavy-cloud philosophy guides you to determine what belongs to the appliance versus the network, ensuring secure, observable operations.

Qualifications

• Hands-on software engineering role on the Cloudflare One Appliance team.
• You will shape and build the Linux-based edge runtime and distributed control plane.
• Senior Systems Engineer with experience across low-level systems, distributed services, and API design.

Responsibilities

• Build systems end to end: Design and implement capabilities spanning the cloud control plane, Linux appliance runtime, telemetry pipeline, and physical, virtual, and cloud deployment environments.
• Build a Linux-based networking platform: Develop and harden the appliance dataplane. Build secure, reliable networking capabilities using IPsec, MASQUE, eBPF, and Linux kernel networking primitives while keeping the system small, predictable, and secure.
• Engineer reliable fleet control: Build distributed control-plane and state-management systems that safely deliver configuration and commands, tolerate intermittent connectivity and partial failures, converge to known-good state, and support zero-touch operation across large device fleets.

Job description

Cloudflare in Denver is seeking a Senior Systems Engineer to hands-on build the Linux-based edge runtime and the distributed control plane that connect customer sites to Cloudflare.

You will work across low-level systems, distributed services, and API design while providing technical leadership for major initiatives. Our light-branch, heavy-cloud philosophy guides you to determine what belongs to the appliance versus the network, ensuring secure, observable operations.