Senior Network Security Architect - Edge & Cloud (Remote)

The Wrap; San Francisco (CA); Hybrid; USD 210,000 - 270,000; Full time

Job summary

Gusto is seeking a Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and perimeter controls. You will shape architecture with a focus on layered defense, automation, and measurable risk reduction.

Ideal candidates have 10+ years in security engineering, deep Cloudflare experience, and strong policy-as-code skills. The role emphasizes AI-native workflows and cross-team collaboration across security, infrastructure, and product teams.

Qualifications

• 10+ years of hands-on security engineering experience.
• Production-grade expertise with Cloudflare security stack (WAF, DDoS, Bot Management, WARP, Gateway, Access).
• Strong network architecture skills across edge and cloud (TLS/mTLS, VPC, Shield, CloudFront).
• Fluency with policy-as-code, Terraform, and CI/CD-first delivery of security controls.
• Solid generalist foundation across cloud security, IAM, container security, and detection engineering.

Responsibilities

• Design and operate Gusto's edge security stack (Cloudflare WAF, DDoS, Bot Management) and tune rules against real traffic.
• Own the network security perimeter across AWS and edge (VPC, CloudFront, NACLs) – codified in Terraform/Crossplane.
• Develop policy-as-code patterns for WAF rules and edge configuration with CI/CD review processes.
• Build detections and alerting on edge/network telemetry and lead incident response for perimeter events.
• Contribute across security domains including cloud posture, IAM, container security, and on-call.

Skills

Cloudflare WAF

DDoS protection

Zero Trust

Terraform CI/CD

Edge security

Tools

Terraform

Crossplane

Panther

Cloudflare

CloudTrail

Job description

Gusto is seeking a Security Engineer to lead edge and network security strategy, owning Cloudflare WAF, DDoS protection, Zero Trust, and perimeter controls. You will shape architecture with a focus on layered defense, automation, and measurable risk reduction.

Ideal candidates have 10+ years in security engineering, deep Cloudflare experience, and strong policy-as-code skills. The role emphasizes AI-native workflows and cross-team collaboration across security, infrastructure, and product teams.