Overview

Interested in protecting and enhancing an internet-scale commerce platform that will support tens of billions in annual sales while helping propel Chick-fil-A to be a global brand? We are looking for an experienced software engineer who enjoys solving a wide range of cross-cutting technology challenges and protecting platforms that can sustain tremendous growth from our business.

In this role you'll serve as a leader, problem solver, mentor, and expert software engineer. We need you to apply the technical experience you have gained to configure, manage, and optimize the Cloudflare platform to protect and enhance our revenue and other critical APIs.

Our Flexible Future model offers a healthy mix of working in person and virtually, strengthening key elements of the Chick-fil-A culture by fostering collaboration and community.

• Assist teams with migration from similar products to Cloudflare's platform of services - providing subject matter expertise in DNS, WAF, SSL/TLS certificates, CDN, and DDoS protection.
• Develop and implement WAF rules to mitigate web application vulnerabilities and protect against attacks.
• Monitor for DDoS attacks and partner with our internal cybersecurity team to respond using Cloudflare's mitigation tools and techniques.
• Manage SSL/TLS certificates and configurations to ensure secure communications.
• Configure caching strategies and optimize performance using Cloudflare's CDN and Argo Smart Routing.
• Implement and manage Cloudflare Load Balancing for high availability and reliability.
• Develop and enforce rate limiting, bot management, and firewall rules to secure web applications.
• Utilize Cloudflare Access and Zero Trust models to protect internal applications and ensure secure access.
• Create and manage Page Rules and API Security settings to enhance site functionality and protect APIs.
• Monitor traffic, security events, and performance using Cloudflare Analytics and logging tools.
• Collaborate with cross-functional teams to understand requirements and provide solutions to enhance performance and security.
• Manage multiple projects simultaneously, balancing competing priorities to deliver results on time.
• Stay updated on the latest Cloudflare features and security best practices to continuously improve our infrastructure.
• Provide technical guidance and support to other team members and stakeholders as needed.
• Cross train with Cloud Platform Engineers to ensure appropriate coverage for critical cloud platforms.

• Good interpersonal and team collaboration skills
• Excellent verbal and written communication skills
• Experience implementing and managing Cloudflare services (specific services detailed in Job Responsibilities above)
• Experience with DevOps engineering best practices, including version control using GitHub and CI/CD
• Experience with Infrastructure as Code (IaC) tools, specifically Terraform or Pulumi
• Experience deploying and managing web services/APIs
• Deep understanding of DNS records and management
• Knowledge and understanding of standard office suite solutions: Microsoft Word, Excel, PowerPoint
• Demonstrated ability to influence teams and software engineers
• Demonstrated ability to collaborate effectively with diverse group such as software engineers and business users
• Knowledge and understanding of change management processes
• Strong oral and written communication skills
• Ability to lead troubleshooting efforts, as necessary
• Ability to review and analyze system performance and capacity reports for remediation purposes

• Experience managing Cloudflare platform at scale, protecting critical revenue-generating services
• Deep understanding of AWS architecture
• Hands on experience managing Kubernetes AKS, EKS, and/or GKE
• Experience building and maintaining platform automation capabilities around Cloudflare
• Experience designing and implementing high-availability application architectures
• Proven experience with Cloudflare services, including complex WAF rules, DDoS protection and remediation, SSL/TLS management, CDN optimization, and Zero Trust enforcement