Network Security Engineer
tiger advisoryMarienthal (KS)
Network Security Engineer
Posted today
tiger advisoryMarienthal (KS)
SENIORITY
Senior
About the role
Cloudflare Security Engineer
Location: Remote
Duration: Contract (6+ months, extension likely)
Start Date: Immediate StartAbout the Opportunity
We are seeking an experienced Cloudflare Security Engineer to join an enterprise client on an urgent engagement. You will design, implement, and operate the client’s Cloudflare security controls. You’ll work with infrastructure, application, and security operations teams to protect internet-facing applications, APIs, and users. This is a hands-on role for an engineer who can start contributing in the first week.
Key Responsibilities:
Configure, tune, and maintain Cloudflare WAF managed and custom rulesets, rate limiting, and Bot Management to stop application-layer attacks while keeping false positives low.
Manage DDoS protection, DNS, SSL/TLS settings, certificates, and origin security across multiple zones.
Implement and support Cloudflare Zero Trust, including Access, Gateway, and Tunnel, for secure user and application access.
Secure APIs with API Shield, schema validation, and mTLS where applicable.
Manage Cloudflare configuration as code with Terraform and the Cloudflare API, following change-control standards.
Integrate Cloudflare logs into the client’s SIEM (Logpush to Splunk, Sentinel, or similar) and support detection, investigation, and incident response.
Lead or support migrations of applications and zones onto Cloudflare from legacy CDN, WAF, or VPN solutions.
Produce clear documentation, runbooks, and recommendations, and communicate effectively with technical and non-technical stakeholders.
Required Qualifications:
5+ years in security engineering, network security, or infrastructure security roles.2+ years of recent, hands-on Cloudflare enterprise experience, including WAF, DDoS, Bot Management, DNS, and SSL/TLS.Working knowledge of Cloudflare Zero Trust (Access, Gateway, Tunnel).Experience with Terraform or other infrastructure-as-code tools for managing edge and security configuration. Solid understanding of HTTP/S, TLS, DNS, TCP/IP, and common web attack techniques (OWASP Top 10).Experience supporting production environments, including incident troubleshooting under pressure. Ability to work independently with minimal ramp-up time.
Preferred Qualifications:
Experience migrating from Akamai, Imperva, F5, Fastly, or AWS WAF to Cloudflare.
Cloudflare Workers or scripting experience (JavaScript, Python, Bash).SIEM/SOC integration experience.
Background in regulated industries such as financial services, healthcare, or legal.
Relevant certifications (e.g., Security+, CISSP, CCSP, cloud security certifications).
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.