Cloudflare
Staff/Principal Software Engineer - Security Platform
$200K–$303K
Distributed +8 · Principal · Full-time · Posted Jul 11, 2025
- Location
- Distributed
Atlanta, GA
Austin, TX, United States
Canada
Denver, Colorado, United States
New York, New York, United States
San Francisco, CA, United States
Seattle, WA
Washington, DC, United States - Experience
- 8+ years of relevant professional experience.
About the job
Build and operate secure, resilient distributed infrastructure for secrets and key management, internal PKI, and machine/workload identity, while supporting internal developers and advising on secure system design.
What you'll do
- Build, operate, and support distributed systems for secrets and key management, PKI, and machine/workload identity.
- Help internal developers use these systems and address operational issues, including possible on-call work outside standard hours.
- Consult on the architecture and secure implementation of new systems and products.
What they ask for
- Software development and distributed systems design expertise.
- Strong security background focused on implementation rather than policy or compliance.
Nice to have
- Track record contributing to open-source security or distributed systems projects; cryptography experience at the primitives level; experience with HSMs, TPMs, or platform TEEs; familiarity with HashiCorp Vault, OpenBao, or similar; Linux/UNIX administration; familiarity with Go and/or Python + Salt.
Pay
USD $220,000 - $303,000 annual salary (base salary); USD $200,000 - $275,000 annual salary (base salary); USD $220,000 - $303,000 annual salary (base salary); USD $220,000 - $303,000 annual salary (base salary); USD $220,000 - $303,000 annual salary (base salary); CAD $192,000 - $264,000 annual salary (base salary)
Tools
HashiCorp Vault, OpenBao, HSMs, TPMs, AMD SEV, Intel SGX, Apple Secure Enclave, Go
AI focus
The posting describes an AI-curious, AI-native culture that uses AI as a partner and to ship faster; it does not specify AI work for this role.
Model-written summary · the original posting is authoritative