Cloudflare
Cloudflare
Cloudflare provides a connectivity cloud that helps organizations secure and connect employees, devices, applications, networks, and data across on-premise environments, public clouds, SaaS platforms, and the internet. Its platform brings together application security, network protection, performance optimization, and visibility tools, helping teams reduce technical complexity while building and delivering software more efficiently. Cloudflare’s work spans cloud and edge delivery, secure networking, and resilient digital infrastructure, making it relevant to professionals working across cybersecurity, networking, cloud platforms, and application performance.

Senior Systems Engineer, MCP Portals (Lisbon Hybrid)

Cloudflare is hiring a senior systems engineer to build and operate distributed MCP portals connecting clients with authorized upstream servers. The role focuses on authentication, Zero Trust, OAuth, observability, and production reliability.

Description

  • Design, implement, and operate globally distributed services that connect MCP clients with authorized upstream MCP servers.
  • Own complex features and service improvements from problem definition and architecture through delivery, rollout, observability, and production support.
  • Guide MCP Portal decisions across service boundaries, security controls, compatibility, reliability, latency, and resource usage.
  • Adapt the implementation as the MCP specification evolves and develop safe migration plans for existing customers and integrations.
  • Design and review authentication and authorization flows involving Cloudflare Access, OAuth, identity, credential management, and delegated upstream access.
  • Use production data to improve the reliability and scalability of multi-tenant systems on the Cloudflare Developer Platform.
  • Expand observability through structured logs, metrics, traces, dashboards, and actionable alerts while contributing to production support and incident response.
  • Investigate complex customer issues across services and teams, determine root causes, and deliver preventative fixes.
  • Review architecture and code, mentor engineers, and raise the quality of testing, deployment, and operational practices.
  • Collaborate with product, security, and engineering teams to translate customer needs and emerging standards into maintainable product capabilities.

Requirements

  • At least six years of experience building and operating distributed systems, backend or network services, or infrastructure products in production.
  • A track record of owning complex production services or projects, including architecture, implementation, rollout, and operational results.
  • Strong programming ability in TypeScript, JavaScript, Go, Rust, C++, or another language used for production services.
  • Deep knowledge of HTTP, APIs, proxies, streaming connections, and failure modes in distributed systems.
  • Experience with authentication and authorization technologies such as OAuth 2.0, OpenID Connect, JWTs, PKCE, or policy-based access control.
  • Experience designing or operating security-sensitive systems, with sound judgment around identity, authorization, credential handling, concurrency, and state management.
  • Ability to diagnose challenging production problems using logs, metrics, traces, error reports, and customer evidence, then deliver lasting fixes.
  • Experience introducing backward-compatible changes to live systems and managing deployment and migration risk.
  • Clear written and verbal communication skills, including the ability to explain technical tradeoffs, influence cross-team decisions, and mentor engineers.
  • A resume or CV detailing relevant engineering, technical leadership, and operational experience.
  • Authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license may be required.
  • Experience with the Model Context Protocol, Cloudflare Developer Platform or other serverless edge-computing platforms, gateways, forward proxies, identity systems, developer platforms, or Zero Trust and data loss prevention products is a plus.

Benefits

  • Eligibility to participate in an equity plan.
  • Attendance at an in-person interview at a Cloudflare office or hub may be requested during the offer stage.
  • Reasonable accommodations are available for qualified individuals with disabilities.

Related Jobs

CONVACT - Agentur für Suchmaschinenoptimierung

Remote Sales Representative – SEO and Google Ads

CONVACT - Agentur für Suchmaschinenoptimierung
1 – 10 Employees
B2BMarketing

Follow up with leads and cold-call prospective clients for Convact’s SEO and Google Ads agency. Book appointments with online shops and e-commerce businesses across the DACH region.

Open