Cloudflare
Cloudflare
Cloudflare ұйымдарға жергілікті инфрақұрылымда, жария бұлттарда, SaaS платформаларында және интернетте жұмыс істейтін қызметкерлерін, құрылғыларын, қолданбаларын, желілері мен деректерін қорғап, өзара байланыстыруға көмектесетін байланыс бұлтын ұсынады. Оның платформасы қолданба қауіпсіздігін, желіні қорғауды, өнімділікті оңтайландыруды және көріну құралдарын біріктіріп, командаларға техникалық күрделілікті азайтуға, бағдарламалық жасақтаманы тиімдірек әзірлеп, жеткізуге мүмкіндік береді. Cloudflare қызметі бұлттық және шеткі жеткізуді, қауіпсіз желілік инфрақұрылымды және орнықты цифрлық инфрақұрылымды қамтиды. Сондықтан компания киберқауіпсіздік, желілер, бұлттық платформалар және қолданба өнімділігі салаларында жұмыс істейтін мамандар үшін маңызды.

Senior Certificate Authority Architect

Design Cloudflare’s public Certificate Authority for secure, Internet-scale certificate issuance. Lead architecture across X.509, Merkle Tree Certificates, and post-quantum Web PKI.

Сипаттама

  • Own the end-to-end architecture for Cloudflare’s public Certificate Authority, spanning issuance, key management, transparency, revocation, renewal, and relying-party integration.
  • Design root and intermediate CA trust hierarchies, signing infrastructure, HSM integration, key ceremonies, rotation, backup, recovery, migration, and compromise response.
  • Architect secure, resilient, highly available certificate issuance services across geographic and failure domains at Internet scale.
  • Design certificate lifecycle systems covering ACME, domain and IP validation, CAA, Certificate Transparency, pre-issuance linting, revocation, renewal, and large-scale replacement.
  • Integrate Cloudflare’s Merkle Tree Certificate infrastructure, including CA logs, landmarks, cosigning or mirroring, and relying-party interactions.
  • Develop migration and coexistence architectures for classical X.509 certificates and post-quantum authentication mechanisms.
  • Define trust boundaries, security properties, and threat models for key compromise, unauthorized issuance, supply-chain attacks, operator error, insider threats, infrastructure failures, split views, and cryptographic migration.
  • Create observable and independently verifiable CA behavior using transparency mechanisms, reproducible builds, cryptographic attestations, public telemetry, tamper-evident evidence, and audit controls.
  • Design containment and recovery strategies for certificate replacement, revocation, key rotation, and incident response.
  • Convert CA/Browser Forum requirements, browser and operating-system root-program policies, audit criteria, and certification requirements into technical and operational controls.
  • Assess protocols, architectures, and implementations from an adversarial security perspective.
  • Partner with cryptography, TLS, security, networking, infrastructure, compliance, product, and operations teams.
  • Provide architectural leadership, conduct design reviews, and mentor engineers.
  • Represent Cloudflare in standards and industry initiatives involving browser vendors, root programs, researchers, auditors, CA operators, and the Web PKI community.

Талаптар

  • Bring substantial experience designing or operating security-critical systems, with deep expertise in at least one of public Certificate Authorities, Web PKI, applied cryptography, TLS and Internet security protocols, Certificate Transparency, hardware-backed key management, or large-scale distributed security systems.
  • Demonstrate strong knowledge of certificate trust chains, issuance and validation, revocation, key lifecycle management, and the security and availability consequences of CA design decisions.
  • Have experience defining system trust boundaries, threat models, security invariants, and failure-handling strategies.
  • Be able to reason about systems where a subtle architectural or operational error could affect a significant portion of the Internet.
  • Have led architecture across multiple engineering teams without depending solely on organizational authority.
  • Communicate clearly in writing and verbally, including explaining cryptographic and architectural tradeoffs to engineers, auditors, standards participants, and senior stakeholders.
  • Work comfortably with substantial autonomy in a changing technical and policy environment.
  • An offer may require authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

Артықшылықтар

  • An in-person interview at a Cloudflare office or hub may be required during the offer stage.
  • Cloudflare is committed to equal employment opportunity, diversity, and inclusion.
  • Reasonable accommodations are available for qualified individuals with disabilities.

Ұқсас жұмыс орындары

Yempo - Your Employees Offshore

Accounts Payable Specialist – Philippines (Remote)

Yempo - Your Employees Offshore

Handle invoices, supplier payments, reconciliations, and Construction Industry Scheme compliance for a UK provider of energy-efficient air conditioning. Choose remote work or the Makati office.

Ашу
Cascadia Healthcare

Remote Accounts Receivable Specialist – Oregon

Cascadia Healthcare

Support billing, collections, audits, and revenue cycle improvements across healthcare communities. Train business office teams and resolve payer and resident account issues.

Ашу
Western Missouri Medical Center

Billing Manager

Western Missouri Medical Center

Lead billing staff and oversee claims, denials, and accounts receivable at Western Missouri Medical Center. Manage revenue cycle performance, payer relationships, and compliance in an on-site role.

Ашу
MCG Health

Senior Sales Executive, Healthcare Providers

MCG Health

Lead enterprise sales and strategic account growth across healthcare provider organizations for MCG Health. Manage complex sales cycles, forecasts, and executive relationships.

Ашу
New Season

Onsite Medical Billing Specialist

New Season

Prepare coded healthcare claims and manage patient billing for Family Health Centers of Southwest Florida. Review claim denials and corrections, support collections, and handle self-pay accounts.

Ашу
Accuserve Solutions

Remote Invoicing Specialist

Accuserve Solutions

Prepare and reconcile invoices for Accuserve Solutions’ managed repair and restoration services. Resolve billing discrepancies and support accurate financial processing with Accounting, carriers, and contractors.

Ашу
Piovan UK

Field Service Technician, Conair Plastics Processing Equipment

Piovan UK

Install, troubleshoot, and repair Conair plastics processing equipment while supporting customers at their sites and remotely. The role also covers preventive maintenance, equipment training, technical support, and on-call assistance.

Ашу
Remote Recruitment

Remote Credit Control Specialist — South Africa

Remote Recruitment

Manage overdue invoices and account reconciliations for a UK employer, working remotely from South Africa during UK business hours.

Ашу
Cozzini, LLC.

Field Service Technician, Protein Processing Equipment

Cozzini, LLC.

Install, troubleshoot, and repair specialized processing equipment for protein and pet food manufacturers. Serve customers across North America with on-site service, training, and remote technical support.

Ашу
inriver

Regional Sales Director, Germany

inriver

Lead enterprise sales across Germany, building manufacturing accounts and partner relationships for Inriver’s product information management platform. Own regional pipeline development and collaborate with sales engineering, marketing, and implementation partners.

Ашу