Systems Engineer, Spectrum
Cloudflare2 months ago
Responsibilities
- Build and operate the Spectrum edge dataplane in Go, including TCP/UDP connection acceptance and forwarding, TLS termination, PROXY protocol, connection accounting, and eBPF integrations.
- Develop the Spectrum Go control plane, including application configuration APIs, provisioning, and globally distributed configuration delivery.
- Integrate Spectrum with Unimog, Magic Transit, Argo Smart Routing, and other Cloudflare systems.
- Improve operational excellence through analytics pipelines, observability, on-call support, incident response, and technical-debt reduction.
- Help shape the roadmap for Spectrum as Cloudflare’s L4 counterpart to its HTTP proxy stack.
- Partner with Packet Processing, Traffic Management, DDoS, DNS, Core SRE, and Edge SRE teams on cross-stack solutions.
Requirements
- Experience building and shipping large-scale, reliable, highly distributed systems.
- Strong programming experience in Go; familiarity with or willingness to work in Rust is a plus.
- Solid understanding of L3/L4 networking, including TCP, UDP, IP, connection state, NAT, anycast, and packet flows.
- Experience with Linux networking primitives such as sockets, eBPF, network namespaces, netfilter/nftables, and tc.
- Experience designing and integrating RESTful APIs and backend systems.
- Comfort operating production systems through on-call rotations, incident response, and root-cause analysis.
- Ability to understand and safely evolve existing systems at scale.
- Excellent debugging and optimization skills, particularly for performance and connection lifecycle issues.
- Clear written and verbal communication and ability to work across teams.
- Bonus experience with TLS termination, PROXY protocol, L4/L7 proxies, ClickHouse, Kafka, globally distributed key-value or config-push systems, DDoS mitigation, anycast routing, L4 load balancing, high-throughput edge daemons, or open-source networking and proxy projects.
Benefits
- Available in Austin, TX.
- Applicants who reach the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub.
- Employment may require authorization to access technology controlled under U.S. export control laws without sponsorship for an export license.
Tech Stack
About Cloudflare
Cloudflare builds a global network that provides CDN, DDoS mitigation, DNS, Zero Trust security, and developer/edge computing tools for organizations of all sizes. It sells subscriptions to its cloud-based platform and usage-based services that protect and accelerate web sites, APIs, and corporate networks, plus serverless apps via Workers. Founded in 2009 and headquartered in San Francisco, it is a public company traded on the NYSE (ticker: NET).