systems engineer (MCP Portals)

Cloudflare operates a global network that protects and accelerates Internet applications. Its MCP Server Portals provide organizations with a secure, centralized way to connect AI agents to internal and third-party tools.

• Design, implement, and operate distributed services connecting MCP clients to authorized upstream MCP servers
• Own scoped features and service improvements through design, implementation, testing, rollout, observability, and production follow-up
• Evolve the implementation as the MCP specification changes while maintaining compatibility for existing customers and integrations
• Build secure authentication and authorization flows involving Cloudflare Access, OAuth, identity, and delegated access to upstream services
• Improve the reliability, scalability, latency, and resource efficiency of multi-tenant systems on the Cloudflare Developer Platform
• Use structured logs, metrics, traces, dashboards, and alerts to understand service behavior; participate in production support and incident response
• Investigate customer issues across multiple services, distinguishing product defects from upstream failures, policy configuration, and infrastructure dependencies
• Collaborate with product, security, and engineering partners to turn customer needs and emerging standards into maintainable product capabilities

• At least 4 years of experience building and operating distributed systems, backend services, network services, or infrastructure products in production
• Strong programming skills in TypeScript, JavaScript, Go, Rust, C++, or another language used to build production services
• Experience independently delivering changes to a production service, including testing, deployment, monitoring, and follow-up
• Solid understanding of HTTP, APIs, proxies, streaming connections, and common distributed-systems failure modes
• Experience debugging production systems using logs, metrics, traces, error reporting, and customer-provided evidence
• Ability to reason carefully about security boundaries, credential handling, concurrency, state management, and backward-compatible deployments
• Clear written and verbal communication skills, including the ability to explain technical tradeoffs and coordinate work across team boundaries
• Будет плюсом: experience with authentication and authorization technologies such as OAuth 2.0, OpenID Connect, JWTs, PKCE, or policy-based access control; experience with the Model Context Protocol; familiarity with the Cloudflare Developer Platform or other serverless edge-computing platforms; experience building gateways, forward proxies, identity systems, developer platforms, or Zero Trust and data loss prevention products

• Equity plan participation is available
• Offer-stage candidates may be asked to attend an in-person interview at a Cloudflare office or hub
• Employment offers may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license