Cloudflare

cloudflare.com · 382 open roles in the last 6 months · hiring in 18 countries

Loading…

Cloudflare is adding capacity to its global network while scaling enterprise sales and developer-platform adoption, with a newer cluster of roles exploring products and infrastructure for AI agents.

Inferred from 429 job postings from the last year, with recent ones weighted more · updated 21 Oct 2026. Not a statement by the company.

What changed recently

The latest hiring adds focused bets on agent discovery, agent payments, and secure agent access, alongside a rebuild of billing and metering for usage-based products. It also reinforces broad enterprise coverage and developer-platform go-to-market, while the Certificate Authority remains an early, narrow signal rather than a large hiring program.

Scalinghigh confidence

Expand enterprise account coverage and make consumption central to selling

1m 483m 906m 991y 104

Field and customer-engineering roles cover acquisition, architecture, adoption, renewals, and expansion across enterprise, mid-market, and strategic accounts. Newer roles also establish consumption targets, attribution, scorecards, and operating rules; separate postings explicitly build SLED coverage in the Pacific Northwest and DC Metro.

Recent account roles span named, major, public-sector, commercial, and mid-market customers across regions.
Two new Consumption Transformation Team roles focus on usage-based planning, attribution, and sales operating rules.
SLED postings explicitly call for building public-sector coverage in the Pacific Northwest and DC Metro.

Scalinghigh confidence

Add global network capacity and improve edge performance and change safety

1m 103m 236m 241y 24

Infrastructure roles cover MW-scale site selection, new U.S. facilities, colocation, LATAM peering, and hardware deployment across a network described as spanning 337+ cities in 125+ countries. Core engineering work targets CDN caching, DNS at roughly 3 trillion queries per day, a Rust HTTP/TLS proxy, Quicksilver, and automated health-mediated deployments.

Capacity planning is moving toward automated, AI-augmented forecasts tied to regional traffic demand.
Deploy@Scale and Intent Management target safer, health-mediated changes across edge and control-plane services.
Roles cite Front Line serving more than 100 million requests per second and DNS handling roughly 3 trillion queries per day.

Capacity Engineer
Principal EngineerPrincipal
Engineering Manager, Data Center OperationsManager

New betmedium confidenceMostly new this month

Build an agent-ready Internet, from secure tool access to discovery and commerce

1m 123m 196m 191y 19

A small, recent group of roles explores ways for site owners to make content discoverable to agents and observe agent interactions, alongside authentication, metering, and micropayment infrastructure for machine-to-machine commerce. Separate engineering roles develop MCP Server Portals so organizations’ agents can reach authorized tools through OAuth, credentials, and Zero Trust controls; partnership roles also point to agentic-traffic analytics and Answer Engine Optimization intelligence.

New engineering management and software roles cover Monetization Gateway, agent discovery, and agent-interaction evaluation.
Two recent roles develop policy-controlled MCP access across Access, Gateway, and Developer Platform teams.
A new partnerships role names AEO intelligence and agentic-traffic analytics as potential commercial offerings.

Scalinghigh confidence

Grow Workers and the Developer Platform from product foundations through customer deployment

1m 23m 156m 181y 19

Product and engineering roles address Wrangler CLI, framework compatibility, distributed database performance, R2’s S3-compatible gateway, Queues, and AI Gateway. A dedicated Developer Platform GTM motion adds solutions architecture, forward-deployed engineering, customer programs, and services intended to move Workers, Workers AI, R2, KV, D1, Durable Objects, and Pages workloads into production.

Workers tooling and backend roles cover CLI, database transactions, object access, and reliable high-volume inference traffic.
Developer GTM roles span leadership, solutions architecture, forward-deployed engineering, and customer programs.
Postings describe production deployments and reusable architecture guidance as central to the customer-facing work.

Scalinghigh confidence

Scale Cloudflare One and Zero Trust as an enterprise SASE business

1m 53m 126m 131y 14

Cloudflare One and Zero Trust roles focus on VPN replacement, network modernization, secure connectivity, and workforce AI governance. Global GTM leadership and partner enablement add a dedicated route to market, including managed SASE offerings and service-provider readiness.

A global Cloudflare One GTM executive role carries end-to-end strategy and business accountability.
Recent specialist and partner roles connect SASE/SSE and Zero Trust selling with AI governance and managed services.

Scalinghigh confidenceMostly new this month

Package Professional Services and expand implementation capacity

1m 63m 86m 91y 9

Services roles aim to create tailored proposals, statements of work, and fixed-outcome offerings, with particular attention to the Developer Platform. Delivery teams support complex enterprise migrations and implementations, including low- or no-downtime work.

Three Services Sales Manager openings focus on scoping customer engagements and growing services work.
A senior practice leader is tasked with building a global Developer Platform services practice.

Scalinghigh confidence

Rebuild billing and metering for subscription and usage-based products

1m 13m 86m 81y 8

A newly reinforced billing effort covers a platform rebuild and a metering and aggregation layer for enterprise and self-serve products. The scope includes quote-to-cash, payments, usage metering, reconciliation, and financial accuracy, while adjacent roles strengthen Oracle Fusion and Zip procurement workflows.

Recent engineering leadership and senior engineering roles explicitly describe a billing-platform rebuild.
Postings connect the work to usage metering, payments, reconciliation, and procurement automation.

Senior Oracle Security and AI EngineerSenior
Senior Zip System Specialist(Contract Role)Senior
Senior Engineering Manager - FintechManager
Principal Oracle Supply Chain LeadPrincipal

New betmedium confidence

Create a public Certificate Authority and prepare Web PKI for post-quantum changes

1m 23m 26m 21y 2

A principal product role and a senior architecture role describe a 0-to-1 public Certificate Authority, with automated ACME issuance and renewal, transparency, and resilience after revocations or incidents. The technical scope also includes Merkle Tree Certificates and a transition toward post-quantum authentication; the signal is distinct but rests on very few roles.

Product and architecture postings independently describe building a new public CA.
The proposed scope draws on Cloudflare’s existing TLS footprint while adding certificate lifecycle automation and post-quantum work.

Principal Product Manager, Certificate AuthorityPrincipal
Senior Certificate Authority ArchitectSenior

Where they are expanding

India — Sales roles target enterprise accounts, alongside broader regional coverage across APAC.
Pacific Northwest — Senior SLED roles explicitly describe building state and local government sales coverage.

Questions to ask in a coffee chat

How do the teams building Wrangler and the Workers backend work with Developer Platform solutions architects when customers move workloads into production?
How are Cloudflare One product teams and partner engineers coordinating on managed SASE offerings and AI governance use cases?
What does the Consumption Transformation Team change about how account teams work with customers adopting usage-based products?
How do teams developing MCP Server Portals divide the work across Access, Gateway, and Developer Platform?
How are infrastructure and edge teams coordinating the shift toward automated capacity forecasts and health-mediated deployments?
For the new Certificate Authority, how do product and engineering teams balance ACME lifecycle automation with the longer-term Web PKI changes?

What this can't tell you

Job postings indicate areas of investment and customer coverage, but do not establish which initiatives will ship, their sequencing, or their eventual scope.
The agent discovery, payments, MCP, and analytics signals span several distinct efforts; their appearance together does not prove they are part of one coordinated product.
The Certificate Authority signal is based on only a small number of product and architecture roles, so its scale and timeline are unclear.
Hiring geography can indicate planned coverage or infrastructure work, but does not by itself confirm an office opening or a completed market expansion.