Security (Cloudflare) Engineer

$112,000 - $179,000/Yr

Peraton - Sterling, VA

Full-time

Remote - Sterling, VA

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

Peraton is seeking a Security (Cloudflare) Engineer to support the Department of State's Bureau of Consular Affairs Enterprise Infrastructure Operations Program. This role involves providing expertise in Cloudflare security measures to protect web applications and services from cyber threats, ensuring the success of the Consular Affairs mission through collaboration with various stakeholders.

Responsibilities

• Provide Cloudflare subject matter expertise in support of CA applications and systems.
• Design, develop, and implement Cloudflare security measures that protect web applications and other services from cyber security threats.
• Create, test, and enforce security policies, rulesets, and configurations that meet DOS requirements.
• Collaborate with application and platform teams to gather requirements focused on operational efficiency, security, traffic routing, and performance optimization.
• Work closely with applications owners, government leadership, security organizations, and other stakeholders to understand security requirements and provide effective WAF solutions.
• Oversee, administer, and manage operational aspects of Cloudflare, including caching, load balancing, workers, custom pages, traffic routing configurations, and SSL certificate management.
• Continuously enhance application security and collaborate with Security Operations to implement new security measures based on incident response activities.
• Manage Cloudflare engineering documentation and changes using approved platforms including Confluence, Jira, and SNOW.
• Develop and maintain comprehensive network flow diagrams, ensuring clarity in data flow, security protocols, and system interactions.
• Support the implementation of Cloudflare in Pre-production and Production environments.
• Support the integration of WAF monitoring with approved data aggregation platforms used by Security Operations.
• Conduct in-depth data analysis in pre-production environments, proactively identifying false positives and providing adequate tuning of configurations and security protections.
• Provide guidance to Security Operations personnel on effective monitoring of Cloudflare triggered events.
• Provide Escalation Engineering/Tier III Cloudflare support for critical CA public-facing and internal applications/services.
• Mentor and support team members through hands-on training and knowledge sharing.
• Identify and assess licensing requirements for Cloudflare products and services.
• Manage Cloudflare accounts using least privilege access principles.

Requirements

• U.S. citizenship and an active SECRET Government Security Clearance with ability to obtain TOP SECRET Government Security Clearance, if needed.
• 3-5 years of relevant security engineering experience.
• Strong understanding of TCP and HTTP protocols.
• Ability to integrate Cloudflare features, such as CDN, Web Application Firewall (WAF), and DDoS protection.
• Understanding of Cloudflare CDN and basic networking topology.
• Possess subject matter expertise in web application security, with a thorough understanding of vulnerabilities, such as SQL injection, XSS, CSRF, API security, and other OWASP Top Ten threats.
• At least one year of hands-on experience supporting Cloudflare application services in a production environment.
• Hands-on proficiency in JavaScript, with the ability to create and deploy scripts for Cloudflare Workers.
• Knowledge of web security protocols, encryption standards, and best practices for securing applications and infrastructure.
• Strong problem-solving skills and willingness to learn quickly in a fast-paced environment.

Nice-to-haves

• 1+ year of networking experience.
• 2+ years of Cloudflare experience.
• Experience integrating WAFs with cloud platforms including Azure and AWS.
• Vendor certifications and/or Industry relevant certifications in Networking or Security.
• Experience with Department of State.
• 1+ year of frontend developer experience.
• Familiarity with Cloudflare Zero-Trust Services.

Benefits

• Flexible work schedule with remote work options.
• Competitive salary range of $112,000 - $179,000 based on experience.