Senior Security Systems Reliability Engineer

Available Location
Lisbon, Portugal
Job Title
Security Systems Reliability Engineer
About the Department
The Security team at Cloudflare is focused and committed to helping secure both Cloudflare and our customers. The Security Systems Reliability Engineering team supports tooling and infrastructure across the Security team.
About the Role
As a Security Systems Reliability Engineer, you will play a key role in designing, implementing, managing, and supporting infrastructure and security technologies. You will be responsible for ensuring systems are secure, highly available, fault tolerant, and scale to meet business needs.
Work may include documenting new standard operating procedures, ensuring vendor recommended security baseline configurations are implemented, designing repeatable deployment patterns, performing disaster recovery testing, performing chaos testing, configuring new integrations, implementing new technologies, patching applications and operating systems, performing upgrades and other maintenance tasks, establishing integrations, documenting the as-built architecture, establishing monitoring and logging, and participating in investigations and service restorations.
As part of our team, you will be expected to:

• Design, implement, and maintain secure infrastructure across various environments (non-production and production).
• Ensure resilient and secure designs are implemented and maintained.
• Drive continuous improvement while maintaining multiple environments.
• Ensure systems meet performance expectations.
• Engage in proactive risk management and incident response planning.
• Develop or utilize automation to streamline repeatable tasks.
• Ensure company data is managed in a secure and scalable manner.
• Contribute to the creation and dissemination of knowledge about the designs within the company.

Examples of desirable skills, knowledge and experience
Security Systems Reliability Engineers take part in a wide variety of tasks and projects in the team. One individual is not expected to know everything, but a working knowledge in several of the following areas is required:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience
• Experience performing the functions of a Site Reliability Engineer (SRE).
• Ability to clearly communicate complex security requirements to stakeholders at all levels
• Ability to navigate ambiguity, and provide clarity to complex situations
• Extensive experience with deploying and administering Kubernetes in an enterprise environment.
• Extensive experience developing and utilizing Terraform to deploy and update environments through infrastructure as code (IaC).
• Extensive experience with deploying and administering Linux systems in an enterprise environment.
• Extensive experience deploying and administering enterprise solutions in GCP, AWS or Azure.
• Experience implementing, integrating, and supporting application security tools within a CI/CD pipeline environment.
• Solid understanding of reliability engineering principles and a commitment to continuous improvement.
• Experience writing scripts, leveraging automation, and creating infrastructure as code to streamline processes.
• Advanced programming experience (Python, Golang, Bash, etc.)
• Strong analytical skills focused on service availability with curiosity and thoroughness in problem-solving.
• Ability to navigate ambiguity, bring clarity to complex situations, and collaborate effectively with various stakeholders.
• Experience working with different security functions as part of a wider team

Bonus Points

• Strong Linux system experience from user-space to kernel-space
• Cross-functional governance experience with programs like PCI-DSS, FedRAMP
• Proficient in managing Application Security related technologies like Veracode, Checkmarx, SonarQube, Snyk, Semgrep, Fortify, or Coverity integrated into CI/CD pipelines.
• Experience with deploying and administering Cloudflare products (access, tunnels, waf)
• Experience working with large data platforms
• Experience working with data classification schemas at scale
• Experience working with organization wide business ecosystems (Google, Microsoft)