Software Engineer, Network Firewall
Build and operate high-performance, distributed network security systems for Cloudflare’s global edge network. The role focuses on Network Firewall capabilities, systems programming, L3/L4 networking, low-latency packet processing, and scalable backend services.
About the job
Responsibilities
- Build, deploy, and operate systems for Cloudflare’s Network Services products on a large global edge network.
- Deliver new features, improve performance, and increase scalability across Network Firewall and related security capabilities.
- Develop solutions for north-south and east-west network architectures with demanding throughput and latency requirements.
- Own solutions end-to-end, including design, development, and deployment.
- Collaborate across engineering and product teams to solve complex customer problems and develop sustainable solutions.
Requirements and Experience
- Experience building and shipping large-scale, reliable, highly distributed systems.
- Systems-level programming experience; Go and/or Rust experience is valuable.
- Expertise in Layer 3 and Layer 4 networking protocols; Layer 2 experience is valuable.
- Experience building high-performance network security products, such as network firewalls, IDS/IPS, DDoS mitigation, rate limiting, packet capture, or threat intelligence integrations.
- Experience with low-latency userspace packet processing.
- Familiarity with Linux kernel networking primitives, including netfilter, nftables, eBPF, tc, and network namespaces.
- Experience designing and integrating RESTful APIs and backend systems.
- Experience with large-scale distributed data pipelines, including data structuring, efficient querying, and data analysis.
- Excellent debugging, profiling, and performance optimization skills for high-throughput, latency-sensitive systems.
- Strong written and verbal communication skills.
Nice-to-Haves
- Attention to detail and ability to solve complex customer problems.
- Creative, open-minded, collaborative problem-solving approach.
- Ability to work effectively across teams.
Additional Information
- Applicants who progress to the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub.
- The position may require access to information protected under U.S. export control laws. Employment may be conditioned on authorization to receive controlled software or technology without sponsorship for an export license.
Skills
Go, Rust, L3 Networking, L4 Networking, Linux, Netfilter, Nftables, Ebpf, Tc, Network Namespaces, REST APIs, Distributed Systems, Network Firewalls, Ddos Mitigation, Packet Processing
Similar jobs
Backend Engineering jobs
PrizePicks
United States
Build and scale Ruby on Rails backend services for rewards, incentives, and loyalty features in a high-throughput platform. The role owns complex feature delivery, contributes to architecture, mentors junior engineers, and requires 3+ years of professional software engineering experience.
Twilio
United States
Build and operate backend capabilities for a cloud identity platform, including authentication flows, APIs, and developer experiences. The role requires 3+ years of experience with high-scale production systems and RESTful API development, with Go, TypeScript, and DynamoDB as preferred skills.
Anthropic
San Francisco, CABuild and scale reliable research infrastructure and distributed systems for evolving AI research workflows. The role independently leads complex technical projects, makes foundational architectural decisions, and partners with researchers and engineering teams.
Cloudflare
Austin, TXBuild and operate Internet-scale HTTP and TLS infrastructure, migrate services to a Rust-based proxy, and improve protocol performance. The role requires systems programming experience, strong reliability and security practices, and interest in open-source standards.
Writer
San Francisco, CABuild secure, scalable backend platforms and AI integrations connecting enterprise systems, tools, and data sources. The role requires 5+ years of backend engineering experience, distributed-systems expertise, cloud-native operations, authentication security, and technical leadership.