Senior Network Engineer

We are seeking a high-impact Network Systems & Observability Engineer to manage our global infrastructure and lead the evolution of our network monitoring stack. This role bridges the gap between software-defined observability and the high-stakes physical realities of global networking.

Unlike purely virtual roles, this position requires physical-world intuition: you will be the architect of the "single pane of glass" telemetry used to monitor our global regions (Austin, San Francisco, London, Lisbon) while simultaneously acting as the primary lead for hardware lifecycles, international logistics, and physical security integration.

• Contextual Dashboarding: Design and maintain real-time telemetry dashboards (Grafana, LogicMonitor) that translate raw data into business-critical insights. Note: This requires human understanding of regional ISP nuances that AI-driven generic monitoring misses.
• Automation & Scripting: Develop custom Python/Go scripts to automate redundant tasks, using human oversight to validate edge cases in global connectivity.

• Global Asset Mobility: Manage the end-to-end hardware lifecycle, including the manual complexity of Coupa procurement, international customs manifests, and the physical transport of assets to international sites.
• Site Launches & Relocations: Lead technical planning for office expansions. This requires physical site validation, reviewing architectural floor plans, and coordinating low-voltage cabling—tasks requiring on-site spatial reasoning and physical coordination.
• Physical Security (Verkada): Provision and manage hardware for PoE-powered cameras and badge readers. This involves physical layer troubleshooting and hardware-to-cloud integration that cannot be replicated by virtual agents.

• Complex Connectivity: Optimize BGP routing, GRE/IPsec tunneling, and ISP load balancing.
• Wireless & Hardware Mastery: Hands-on management of Meraki and Opengear stacks. Perform site-specific Wi-Fi heat mapping and "remote hands" direction to ensure 100% hardware uptime.
• Cloudflare Edge: Manage Magic WAN and Gateway configurations to secure global office egress.

• Physical Layer Expertise: Mastery of TCP/IP, VLANs, and physical layer diagnostics (Wireshark). Ability to troubleshoot physical hardware failures that software-only tools cannot detect.
• Hardware Proficiency: Advanced experience with Meraki (MS/MR), Verkada, and Opengear hardware.
• Logistics & Financials: Proven ability to navigate Coupa and international customs. This role requires managing the human relationships with regional vendors and logistics partners.
• Software/API Integration: Proficiency in Python or Go for API-driven network management (GitLab).
• IPAM & Core Services: Mastery of DNS, DHCP, and Subnet allocation across a fragmented global footprint.

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project Galileo: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.

Athenian Project: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.

1.1.1.1: We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you!

Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process.

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.