LogoFresh Jobs Ahead
Cloudflare
Cloudflare
1,001 – 5,000 Employees
H1B Visa SponsorConsultingLogisticsMarketing
Cloudflare provides a connectivity cloud that helps organizations secure and connect employees, devices, applications, networks, and data across on-premise environments, public clouds, SaaS platforms, and the internet. Its platform brings together application security, network protection, performance optimization, and visibility tools, helping teams reduce technical complexity while building and delivering software more efficiently. Cloudflare’s work spans cloud and edge delivery, secure networking, and resilient digital infrastructure, making it relevant to professionals working across cybersecurity, networking, cloud platforms, and application performance.
LinkedIn
Company Jobs

Senior Certificate Authority Architect

Design Cloudflare’s public Certificate Authority for secure, Internet-scale certificate issuance. Lead architecture across X.509, Merkle Tree Certificates, and post-quantum Web PKI.

USUnited StatesTXTexasHybridFull-timeSeniorEnglish RequiredArchitect

Description

  • Own the end-to-end architecture for Cloudflare’s public Certificate Authority, spanning issuance, key management, transparency, revocation, renewal, and relying-party integration.
  • Design root and intermediate CA trust hierarchies, signing infrastructure, HSM integration, key ceremonies, rotation, backup, recovery, migration, and compromise response.
  • Architect secure, resilient, highly available certificate issuance services across geographic and failure domains at Internet scale.
  • Design certificate lifecycle systems covering ACME, domain and IP validation, CAA, Certificate Transparency, pre-issuance linting, revocation, renewal, and large-scale replacement.
  • Integrate Cloudflare’s Merkle Tree Certificate infrastructure, including CA logs, landmarks, cosigning or mirroring, and relying-party interactions.
  • Develop migration and coexistence architectures for classical X.509 certificates and post-quantum authentication mechanisms.
  • Define trust boundaries, security properties, and threat models for key compromise, unauthorized issuance, supply-chain attacks, operator error, insider threats, infrastructure failures, split views, and cryptographic migration.
  • Create observable and independently verifiable CA behavior using transparency mechanisms, reproducible builds, cryptographic attestations, public telemetry, tamper-evident evidence, and audit controls.
  • Design containment and recovery strategies for certificate replacement, revocation, key rotation, and incident response.
  • Convert CA/Browser Forum requirements, browser and operating-system root-program policies, audit criteria, and certification requirements into technical and operational controls.
  • Assess protocols, architectures, and implementations from an adversarial security perspective.
  • Partner with cryptography, TLS, security, networking, infrastructure, compliance, product, and operations teams.
  • Provide architectural leadership, conduct design reviews, and mentor engineers.
  • Represent Cloudflare in standards and industry initiatives involving browser vendors, root programs, researchers, auditors, CA operators, and the Web PKI community.

Requirements

  • Bring substantial experience designing or operating security-critical systems, with deep expertise in at least one of public Certificate Authorities, Web PKI, applied cryptography, TLS and Internet security protocols, Certificate Transparency, hardware-backed key management, or large-scale distributed security systems.
  • Demonstrate strong knowledge of certificate trust chains, issuance and validation, revocation, key lifecycle management, and the security and availability consequences of CA design decisions.
  • Have experience defining system trust boundaries, threat models, security invariants, and failure-handling strategies.
  • Be able to reason about systems where a subtle architectural or operational error could affect a significant portion of the Internet.
  • Have led architecture across multiple engineering teams without depending solely on organizational authority.
  • Communicate clearly in writing and verbally, including explaining cryptographic and architectural tradeoffs to engineers, auditors, standards participants, and senior stakeholders.
  • Work comfortably with substantial autonomy in a changing technical and policy environment.
  • An offer may require authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

Benefits

  • An in-person interview at a Cloudflare office or hub may be required during the offer stage.
  • Cloudflare is committed to equal employment opportunity, diversity, and inclusion.
  • Reasonable accommodations are available for qualified individuals with disabilities.

Related Jobs

Protective Life

Bilingual Automotive Claims Adjuster

Protective Life
1,001 – 5,000 Employees
H1B Visa SponsorFinanceInsurance
USUnited StatesALAlabama
$50,000 – $60,000 / year
RemoteFull-timeJuniorMiddleNo degree requiredEnglish RequiredSpanish RequiredClaims Specialist

Handle claims for Protective Asset Protection, which provides vehicle protection and finance and insurance solutions to dealerships and financial institutions. Assess coverage, investigate losses, and assist customers in English and Spanish.

Open