Site Reliability Engineer, Kraken

• 3+ years of experience as a Site Reliability Engineer, Cloudflare Engineer, Platform/Infrastructure Engineer, or similar role, with meaningful ownership of edge, CDN, or ingress systems
• Hands-on production experience with Cloudflare, including WAF/Rulesets, Bot Protection, Rate Limiting, DNS, Zones/Accounts administration, and certificate management
• Production experience operating HAProxy (OSS and/or Fusion) or comparable reverse proxies, including TLS termination, TCP passthrough, and proxy-protocol
• Experience with AWS networking primitives: Direct Connect, Load Balancers (ALB/NLB), and VPC routing/connectivity patterns
• Working knowledge of service mesh technology (Istio or equivalent) and its role in traffic management and mTLS
• Experience operating Cloudflare Workers and R2 Storage in production for edge compute or storage offload use cases
• Solid understanding of web application security: OWASP Top 10-style attack vectors, credential stuffing, DDoS mitigation strategies, and ACL design
• Proficiency with Infrastructure as Code, particularly Terraform and Atlantis, and comfort building self-service automation for other engineering teams
• Solid scripting/programming ability (bash plus at least one of Python or Golang) and comfort using AI tools and agents (e.g., Claude) to accelerate delivery
• Familiarity with observability stacks such as Grafana, VictoriaMetrics, Tempo, Splunk or similar tools for edge and network telemetry
• Strong problem-solving skills and the ability to troubleshoot complex, distributed, and adversarial network traffic issues under pressure
• Solid understanding of HTTP semantics in the browser context: caching behaviour, cross-origin resource sharing (CORS), and cookie/session management

Desirable

• Join our engineering team as a Senior Site Reliability Engineer focused on the edge and ingress layer that fronts our platform — the systems that stand between the public internet and our services
• You will own the design, hardening, and operation of our Cloudflare edge configuration and our ingress/reverse-proxy stack, ensuring traffic reaches our applications securely, reliably, and at scale
• As a member of the SRE team, you will guarantee the availability, performance, low-latency, security, and cost efficiency of our edge and ingress infrastructure
• This is an excellent opportunity for an engineer who is passionate about edge networking, application security, load balancing, and building self-service automation for dozens of engineering teams operating mission-critical financial services
• You will work closely with Security Engineers, NetOps, Platform teams, and Software Engineers to improve operational excellence for how traffic enters and moves through our environment, while mentoring other engineers and raising the bar on edge and ingress reliability practices
• Own and evolve our Cloudflare edge configuration across Accounts and Zones, including WAF rules, custom Rulesets, Bot Protection, and Rate Limiting policies
• Design and maintain DNS architecture in Cloudflare, including zone delegation, record hygiene, and change management at scale
• Implement and operate mTLS with Authenticated Origin Pulls, private PKIs, and manage the certificate lifecycle (issuance, rotation, renewal) across Cloudflare and origin infrastructure
• Build and support self-service automation for edge configuration using Terraform, enabling application teams to safely manage their own WAF, DNS, and routing changes
• Develop and operate solutions using Cloudflare Workers and R2 Storage to extend edge logic and reduce origin load
• Own the ingress and reverse-proxy layer, including HAProxy OSS and HAProxy Fusion (enterprise), covering TLS termination, mTLS, TCP passthrough, proxy-protocol handling, HTTP/HTTPs/FIX protocols
• Design and manage reverse proxy topologies and load balancing across AWS Load Balancers, AWS Direct Connect, AWS Private Link and similar solutions for hybrid on-premises/cloud connectivity
• Build, operate, and improve Kubernetes ingress controllers, and design/write Kubernetes Operators and CRDs to automate ingress and routing configuration as code
• Operate and extend service mesh (Istio) capabilities, including traffic management, mTLS between services, and observability of east-west traffic
• Partner with Security to defend against OWASP-class attack vectors, implement credential-stuffing protection, DDoS prevention, and manage ACLs across the edge and ingress layers
• Implement robust monitoring and alerting for edge, DNS, and ingress health to proactively detect anomalies, latency regressions, and abuse patterns
• Lead incident response for edge/ingress-related incidents and participate in on-call rotations, including postmortems and runbook development
• Document architecture, standards, and best practices for the edge and ingress layer, and mentor other engineers on Cloudflare and ingress operations
• Act as the primary subject matter expert for Cloudflare, ingress, and edge networking, providing weekly support to engineering teams through office hours, support requests, architecture guidance, technical coaching, and hands-on assistance to unblock projects and enable successful adoption of platform capabilities

• Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis