Staff Cloud Engineer: Edge CDN & WAF Orchestrator

Intuit Inc.; San Diego (CA); On-site; USD 189,000 - 255,000; Full time

Job summary

Intuit Inc. is hiring a Senior/Staff Software Engineer with deep Akamai CDN & WAF expertise to protect and accelerate Intuit's public-facing traffic from our San Diego campus.

You will help design and govern a paved road to onboard endpoints to Akamai, tune edge security policies, and build self-service platforms for edge, DNS, and certificate workflows. You will lead the development of agentic tooling, APIs, and UIs, while mentoring engineers and coordinating with vendors like Akamai and

Qualifications

• BS in Computer Science or equivalent work-related experience.
• Deep hands-on Akamai expertise, Property Manager/Ion, Kona / App & API Protector (WAF), Bot Manager, Client Reputation, CPS certificates, EdgeWorkers, SiteShield, and the PAPI/{OPEN} APIs.
• Strong networking foundation and troubleshooting of TCP/IP, HTTP/2, DNS (Route 53, delegation, CNAME chains, split-horizon), SSL/TLS and mTLS, CDN origin/edge routing, VPN, AWS Transit Gateway/VPC routing, BGP, and SSH.
• A software engineer who can build, not just operate, proficient in scripting/development (Full Stack preferred), specifically Python, Golang, React, and Java, and building and owning REST APIs, UIs, and MSaaS services.
• Background with Infrastructure as Code (CloudFormation, AWS CDK, Terraform), deployment automation (CodeBuild, Jenkins), and an understanding of GitOps.
• Hands-on AWS experience (API Gateway, CloudFront, ACM, ALB/NLB, Lambda, WAFv2, IAM); knowledge of Google GCP and Microsoft Azure preferred.
• Fluent in AI agent development and orchestration, able to build agentic/self-service tooling and to review AI-generated output to the same quality bar as peer code.
• Experience operating a production support/on-call surface with formal change management, incident RCA, and clear customer-facing communication.
• Staff-level candidates additionally: own the technical vision for a domain or system across multiple teams, engineer closed-loop agentic workflows that reduce manual toil, and drive operational excellence and quality guardrails beyond their own team.

Responsibilities

• Build the CDN/WAF paved road, automate onboarding of public endpoints to Akamai, with tooling that recommends and optimizes edge/CDN configurations for development teams.
• Engineer & tune edge security policies, WAF, bot-management, client-reputation, and rate-control policies; balance security with false-positives and blast-radius risk.
• Design self-service platforms, engineer and support self-service applications, APIs, and UIs for edge, DNS, and certificate workflows.
• Own DNS & certificate lifecycle, support and improve DNS, SSL/TLS certificate lifecycle (ACM/Venafi/DigiCert, including mTLS), CDN, and network-connectivity solutions.
• Troubleshoot the full packet path, diagnose connectivity issues across the edge and cloud network (CDN origin/SiteShield, DNS resolution, TLS, Transit Gateway routing), with the ability to reason about the full path.
• Automate compliance & cost, engineer policies to report or auto-remediate compliance and cost issues, and drive proactive, continuous performance tuning of Cloud Platform services.
• Encode knowledge into agents, build agentic and self-service tooling that turns team knowledge into reusable patterns so standards travel with the automation.
• Provide 24x7 incident response for critical edge/Platform Services, including off-hours migration and cutover windows.
• Partner with vendors & internal teams, work closely with vendors (e.g., Akamai) and internal development teams to define operational support models and escalation paths.
• Mentor & influence, stay abreast of new technologies, recommend best practices, and mentor engineers, including coaching on how to break work into pieces that agents can execute reliably.

Skills

Akamai CDN/WAF

Networking fundamentals

Python

Golang

React

Java

REST APIs

CI/CD

GitOps

On-call experience

Education

BS in Computer Science

Tools

Akamai Kona

App & API Protector

WAFv2

SiteShield

TLS/SSL

Terraform

CloudFormation

AWS CDK

Jenkins

CodeBuild

Job description

Intuit Inc. is hiring a Senior/Staff Software Engineer with deep Akamai CDN & WAF expertise to protect and accelerate Intuit's public-facing traffic from our San Diego campus.

You will help design and govern a paved road to onboard endpoints to Akamai, tune edge security policies, and build self-service platforms for edge, DNS, and certificate workflows. You will lead the development of agentic tooling, APIs, and UIs, while mentoring engineers and coordinating with vendors like Akamai and