🛠 Tech Stack

💼 About This Role

You'll lead edge and network security strategy at Gusto, owning Cloudflare WAF, DDoS protection, and Zero Trust rollout. Your work protects payroll, benefits, and HR systems for hundreds of thousands of small businesses. You'll serve as a force multiplier across the security org, making high-impact architectural decisions that compound over time.

🎯 What You'll Do

• Design and operate edge security stack including Cloudflare WAF, DDoS, Bot Management, WARP, Gateway, and Access.
• Own network security perimeter across AWS and edge: VPC design, Network Firewall, Shield, CloudFront, NACLs, egress filtering.
• Develop policy-as-code patterns for WAF rules, network policies, and edge configuration via Terraform and Crossplane.
• Build detections and alerting on edge and network telemetry in Panther, and lead incident response for perimeter events.

📋 Requirements

• 10+ years of hands-on security engineering experience with edge, network, or perimeter security at scale.
• Deep, production-grade expertise with Cloudflare security stack including WAF, DDoS, Bot Management, WARP, Gateway, and Access.
• Strong network architecture skills across edge and cloud: TLS/mTLS, segmentation, egress controls, DDoS resilience, AWS networking.
• Fluency with policy-as-code, Terraform, and CI/CD-first delivery of security controls.

✨ Nice to Have

• Crossplane or similar infrastructure-as-code experience.
• Relevant certifications including AWS Certified Advanced Networking Specialty, AWS Certified Security Specialty, Cloudflare Certified Security Associate/Professional, CKS.

🎁 Benefits & Perks

• 💰 Competitive base pay with stock equity (RSUs).
• 🏖️ Flexible PTO and remote-friendly culture.
• 🏥 Health insurance including medical, dental, vision.
• 📈 401(k) plan with company match.
• 🏢 Office spaces in Denver, San Francisco, New York City with hybrid schedule.

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Call· 30 min
2. 2Technical Screen· 60 min
3. 3Onsite Rounds (2-3 interviews)· 3-4 hours