Software Engineer - Security Platform
Build and operate secure distributed systems for secrets/key management, PKI, and machine identity across Cloudflare's global network. Requires 8+ years experience in software development, distributed systems, and security implementation.
About the job
What you’ll do
- Build and operate secure and resilient distributed systems for secrets and key management across a global network spanning 310+ cities in 120+ countries.
- Strengthen and re-architect internal PKI and machine/workload identity systems.
- Run and support the systems you build, including operational duties and helping internal developers use them effectively.
- Consult on the design and architecture of new systems and products to ensure they are built securely and use services correctly.
- Participate in on-call rotations outside standard working hours as needed.
Requirements
- 8+ years of relevant professional experience
- Software development and distributed systems design expertise
- Strong security background with a focus on implementation, not policy/compliance
Bonus / nice-to-have skills
- Track record of contributing to open source security or distributed systems projects
- Cryptography background and ability to work with cryptosystems at the primitives level
- Experience with HSMs, TPMs, or other platform TEEs (e.g. AMD SEV, Intel SGX, Apple Secure Enclave)
- Familiarity with HashiCorp Vault or OpenBao, or similar
- Linux/UNIX system administration proficiency
- Familiarity with Go and/or Python + Salt specifically
Skills
Distributed Systems, Secrets Management, Pki, Machine Identity, Workload Identity, Cryptography, Hsms, Tpms, Tees, Hashicorp Vault, Openbao, Linux, Unix, Go, Python
Similar jobs
Security Engineering jobs
GitLab
United StatesLeads the Product Security team responsible for security posture management, governed security rollouts, and software supply chain security across GitLab’s software factory. The role combines technical security leadership, organizational adoption, audit readiness, team building, and external thought leadership.
Upstart
United States
Leads application security initiatives across products, APIs, distributed systems, and AI-enabled applications. The role requires at least five years of security or software engineering experience, strong threat-modeling and architecture skills, and the ability to build security automation and drive remediation.
Censys
United States
Build and operate scalable malware-analysis, threat-enrichment, and graph-intelligence systems that power security research and detection. The role requires 6+ years of security pipeline or threat-intelligence experience, strong Python or Go skills, and expertise in cloud and distributed systems.
Flex
United States
Build and lead product and infrastructure security for systems that move money, creating secure defaults, automation, access controls, and vulnerability management processes. The role requires strong software engineering, cloud infrastructure expertise, risk-based judgment, and the ability to operate independently as the senior security engineer.
Wiz
United States
Leads engineering for Wiz’s FedRAMP CR26 initiative, translating federal compliance requirements into scalable compliance-as-code, automation, and evidence-generation solutions. Requires 6+ years in security, DevOps, or systems engineering and deep experience with NIST, FedRAMP, and government cloud environments.