Cloudflare network & security engineer

We are seeking a Senior Cloudflare Network & Security Engineer to implement, operate, and support Cloudflare enterprise networking and security solutions. In this role, you will work closely with customers, architects, and delivery teams to deploy secure, scalable, and resilient Cloudflare services across enterprise environments.

• Deploy and configure Cloudflare One solutions
• Implement Zero Trust security policies and application access controls
• Configure Secure Web Gateway, CASB, DLP, and Remote Browser Isolation capabilities
• Deploy and support Cloudflare Tunnel, WARP, and Access, including SSO/Identity Provider integration
• Configure and support WAF, Rate Limiting, Bot Management, and Ruleset Engine policies
• Configure Magic WAN and Magic Transit
• Support DNS, proxied records, Load Balancing, and API security solutions
• Perform migrations from traditional VPN, network, and security platforms
• Troubleshoot HTTP, DNS, TLS, networking, application connectivity, and security incidents
• Analyze Cloudflare-specific HTTP response headers and metadata
• Support customer onboarding and implementation activities
• Produce implementation and operational documentation while collaborating with architects and customer teams during Cloudflare projects

• 5+ years of demonstrated hands-on experience implementing Cloudflare enterprise solutions, including customer-facing implementation and troubleshooting
• Expertise in enterprise networking and web technologies, including HTTP/HTTPS, TLS, DNS, caching, and web security concepts
• Experience deploying Zero Trust architectures and practical SASE implementations
• Experience implementing Cloudflare Tunnel, WARP, and Access
• Experience integrating identity providers and implementing SSO-based application access
• Familiarity with cloud networking concepts
• Experience with Git-based development workflows
• Knowledge of Cloudflare One, ZTNA, Cloudflare Access, WARP, and Tunnel
• Proficiency in Secure Web Gateway, CASB, DLP, and Remote Browser Isolation
• Skills in WAF, Rate Limiting, Bot Management, and Ruleset Engine
• Knowledge of DNS, Proxied Records, Load Balancing, and API Shield
• Understanding of Magic WAN, Magic Transit, Workers, and Snippets

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events
• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts in local language schools, including online courses for the Kazakh language
• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership