Site Reliability Engineer - Cloudflare & Ingress - Core Infrastructure

📋 Description

• Own and evolve Cloudflare edge config across Accounts/Zones (WAF, bot protection)
• Design DNS architecture in Cloudflare at scale (zone delegation, records hygiene)
• Implement and operate mTLS with Authenticated Origin Pulls and private PKIs
• Build self-service edge automation using Terraform for WAF, DNS, routing
• Develop and operate Cloudflare Workers and R2 Storage for edge compute
• Own ingress/reverse-proxy layer (HAProxy OSS/Fusion) including TLS/mTLS routing

🎯 Requirements

• 3+ years as SRE/Cloudflare/Platform with edge/ingress ownership
• Hands-on Cloudflare: WAF/Rulesets, Bot Protection, Rate Limiting, DNS, Zones, cert mgmt
• Production experience with HAProxy (OSS/Fusion): TLS termination, TCP passthrough, proxy-protocol
• AWS networking primitives: Direct Connect, Load Balancers, VPC routing
• Service mesh knowledge: Istio or equivalent for traffic mgmt and mTLS
• Experience operating Cloudflare Workers and R2 Storage

🎁 Benefits

• Cloudflare One VPN management experience
• On-prem colocation with clients for ultra-low-latency environments
• Troubleshooting Linux performance bottlenecks, NUMA pinning, packet drops
• Strong Kubernetes experience: deploying/troubleshooting ingress, Operators/CRDs
• Kubernetes Ingress Controllers at scale across AWS and on-prem
• Background in regulated/financial services environments with change management/audit trails