Professional Services Consultant, Zero Trust

The role

You will provide technical execution for complex Zero Trust and SASE solutions as a senior individual contributor. You will design, implement, and troubleshoot security architectures for enterprise customers.

What you will do

• Plan and deliver organized services and advice on product best practices.
• Gather business and technical requirements to build, migrate, and deliver solutions.
• Produce Solution Design, HLD, LLD, databuilds, procedures, scripts, and deployment plans.
• Implement changes in the Cloudflare environment following customer change-management processes.
• Provide guidance to customers to configure CPEs and integration points.
• Troubleshoot implementation issues and collaborate with Support and Engineering.
• Contribute to knowledge-sharing through documentation and technical Q&A.
• Build operational assets like templates, automation scripts, and workflows.
• Lead multi-workstream engagements and act as senior technical owner for complex deployments.
• Support pre-sales scoping and mentor junior consultants.

Required qualifications

• 3+ years in a customer-facing technical implementation, security engineering, or SOC team.
• 3+ years focused on Zero Trust / SASE.
• Strong command of the OSI model and core protocols: TCP/IP, TLS, DNS, HTTP/2.
• Deep understanding of ZTNA, SWG, RBI, DLP, CASB, and Cloud Email Security.
• Deep understanding of forward and reverse proxies, sandboxing, firewalls/NGFW, WAF, bot management, rate limiting, and SSL/IPsec & SSL/TLS VPN.
• Hands-on experience with SSO via SAML and OIDC, SCIM, LDAP/Active Directory, MFA/FIDO2, and Microsoft Entra ID, Okta, or Ping.
• Deep understanding of DNS filtering, DoH/DoT, conditional forwarding, and split-DNS.
• Software distribution and deployment across Windows, macOS, and Linux.
• Windows and Linux server administration.
• Client-endpoint troubleshooting across Windows, macOS, and Linux.
• Networking troubleshooting using packet capture and DNS/HTTP tracing.
• Ability to manage a project, work to deadlines, and prioritize demands.

Nice to have

• Fluency in Spanish or Portuguese
• Automation / Infrastructure-as-Code: Terraform, REST APIs, Python/Bash, Git, CI/CD, and policy-as-code
• Cloud platforms: AWS / Azure / GCP networking
• SASE on-ramp networking: IPsec/GRE, BGP, Anycast, and SD-WAN / MPLS
• MDM software distribution (Intune, Jamf)
• Identity & directory tooling: Microsoft Active Directory, GPO, Entra ID, and Intune
• Observability: Logpush, SIEM integration, and Digital Experience Monitoring
• Frameworks & compliance: NIST, GDPR, DORA, NIS2, ISO 27001, PCI DSS, HIPAA, SOC 2, FedRAMP
• Certifications: CISSP, CCSP, SC-300, AZ-500, AWS Security Specialty, CCNP/CCIE, CompTIA
• Forensic certifications: GCFA, GCFE, GCIA, GCIH

Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance
• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Before you apply

• Applicants may be asked to attend an in-person interview at a Cloudflare Office or Hub.
• Position may require access to information protected under U.S. export control laws.
• Offer may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and Internet properties. The company protects and accelerates Internet applications without adding hardware or changing code.