Site Reliability Engineer - Cloudflare & Ingress

Location

United Kingdom; Argentina; Brazil; Bulgaria; Canada; Colombia; Cyprus; Czech Republic; Hungary; Ireland; Lithuania; Mexico; Peru; Poland; Portugal; Romania; South Africa; Spain; Sweden; Switzerland

Employment Type

Full time

Location Type

Remote

Department

EngineeringCore Infrastructure

Compensation

$100K – $130K • Offers Equity • Offers Bonus

This is the target annual salary range for this role. This range is not inclusive of other additional compensation elements, such as our Bonus program, Equity program, Wellness allowance, and other benefits [US Only] (including medical, dental, vision and 401(k)).

The compensation range provided is influenced by various factors and represents the initial target range. Our salary offerings are dynamic and we strive to ensure that our base salary and total compensation package aligns and recognizes the top talent we aim to attract and retain. The compensation package of the successful candidate is based on various factors such as their skillset, experience, and job scope.

Overview

Building the Future of Open Finance

Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.

Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.

The team

Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.

Join our engineering team as a Senior Site Reliability Engineer focused on the edge and ingress layer that fronts our platform — the systems that stand between the public internet and our services. You will own the design, hardening, and operation of our Cloudflare edge configuration and our ingress/reverse-proxy stack, ensuring traffic reaches our s securely, reliably, and at scale.

As a member of the SRE team, you will guarantee the availability, performance, low-latency, security, and cost efficiency of our edge and ingress infrastructure. This is an excellent opportunity for an engineer who is passionate about edge networking, security, load balancing, and building self-service automation for dozens of engineering teams operating mission-critical financial services.

You will work closely with Security Engineers, NetOps, Platform teams, and Software Engineers to improve operational excellence for how traffic enters and moves through our environment, while mentoring other engineers and raising the bar on edge and ingress reliability practices.

The opportunity

Own and evolve our Cloudflare edge configuration across Accounts and Zones, including WAF rules, custom Rulesets, Bot Protection, and Rate Limiting policies.

Design and maintain DNS architecture in Cloudflare, including zone delegation, record hygiene, and change management at scale.

Implement and operate mTLS with Authenticated Origin Pulls, private PKIs, and manage the certificate lifecycle (issuance, rotation, renewal) across Cloudflare and origin infrastructure.

Build and support self-service automation for edge configuration using Terraform, enabling teams to safely manage their own WAF, DNS, and routing changes.

Develop and operate solutions using Cloudflare Workers and R2 Storage to extend edge logic and reduce origin load.

Own the ingress and reverse-proxy layer, including HAProxy OSS and HAProxy Fusion (enterprise), covering TLS termination, mTLS, TCP passthrough, proxy-protocol handling, HTTP/HTTPs/FIX protocols.

Design and manage reverse proxy topologies and load balancing across AWS Load Balancers, AWS Direct Connect, AWS Private Link and similar solutions for hybrid on-premises/cloud connectivity.

Build, operate, and improve Kubernetes ingress controllers, and design/write Kubernetes Operators and CRDs to automate ingress and routing configuration as code.

Operate and extend service mesh (Istio) capabilities, including traffic management, mTLS between services, and observability of east-west traffic.

Partner with Security to defend against OWASP-class attack vectors, implement credential-stuffing protection, DDoS prevention, and manage ACLs across the edge and ingress layers.

Implement robust monitoring and alerting for edge, DNS, and ingress health to proactively detect anomalies, latency regressions, and abuse patterns.

Lead incident response for edge/ingress-related incidents and participate in on-call rotations, including postmortems and runbook development.

Document architecture, standards, and best practices for the edge and ingress layer, and mentor other engineers on Cloudflare and ingress operations.

Act as the primary subject matter expert for Cloudflare, ingress, and edge networking, providing weekly support to engineering teams through office hours, support requests, architecture guidance, technical coaching, and hands-on assistance to unblock projects and enable successful adoption of platform capabilities.

What you bring

3+ years of experience as a Site Reliability Engineer, Cloudflare Engineer, Platform/Infrastructure Engineer, or similar role, with meaningful ownership of edge, CDN, or ingress systems.

Hands-on production experience with Cloudflare, including WAF/Rulesets, Bot Protection, Rate Limiting, DNS, Zones/Accounts administration, and certificate management.

Production experience operating HAProxy (OSS and/or Fusion) or comparable reverse proxies, including TLS termination, TCP passthrough, and proxy-protocol.

Experience with AWS networking primitives: Direct Connect, Load Balancers (ALB/NLB), and VPC routing/connectivity patterns.

Working knowledge of service mesh technology (Istio or equivalent) and its role in traffic management and mTLS.

Experience operating Cloudflare Workers and R2 Storage in production for edge compute or storage offload use cases.

Solid understanding of web security: OWASP Top 10-style attack vectors, credential stuffing, DDoS mitigation strategies, and ACL design.

Proficiency with Infrastructure as Code, particularly Terraform and Atlantis, and comfort building self-service automation for other engineering teams.

Solid scripting/programming ability (bash plus at least one of Python or Golang) and comfort using AI tools and agents (e.g., Claude) to accelerate delivery.

Familiarity with observability stacks such as Grafana, VictoriaMetrics, Tempo, Splunk or similar tools for edge and network telemetry.

Strong problem-solving skills and the ability to troubleshoot complex, distributed, and adversarial network traffic issues under pressure.

Solid understanding of HTTP semantics in the browser context: caching behaviour, cross-origin resource sharing (CORS), and cookie/session management.

Nice to haves

Cloudflare One VPN management experience.

On-premises colocation with clients for ultra-low-latency environments.

Experience troubleshooting low-level Linux performance bottlenecks, NUMA pinning, packet drops.

Strong Kubernetes experience, including deploying and troubleshooting ingress controllers, and hands-on experience building or maintaining Kubernetes Operators/CRDs.

Experience operating Kubernetes Ingress Controllers at scale across AWS and on-premises environments.

Background in highly regulated or financial services environments where change management an