Systems Engineer, MCP Portals

The role

You will build and operate distributed systems that authenticate users, manage OAuth credentials, and proxy MCP traffic. You will own scoped projects from design through rollout and production support.

What you will do

• Design, implement, and operate distributed services that connect MCP clients to authorized upstream MCP servers.
• Own scoped features and service improvements through design, implementation, testing, rollout, observability, and production follow-up.
• Evolve implementation as the MCP specification changes while maintaining compatibility.
• Build secure authentication and authorization flows involving Cloudflare Access, OAuth, identity, and delegated access.
• Improve reliability, scalability, latency, and resource efficiency of multi-tenant systems.
• Use structured logs, metrics, traces, dashboards, and alerts to understand service behavior.
• Participate in production support and incident response.
• Investigate customer issues across multiple services.
• Collaborate with product, security, and engineering partners.

Required qualifications

• 4+ years of experience building and operating distributed systems, backend services, network services, or infrastructure products in production.
• Strong programming skills in TypeScript, JavaScript, Go, Rust, C++, or another language used to build production services.
• Experience independently delivering changes to a production service, including testing, deployment, monitoring, and follow-up.
• A solid understanding of HTTP, APIs, proxies, streaming connections, and common distributed-systems failure modes.
• Experience debugging production systems using logs, metrics, traces, error reporting, and customer-provided evidence.
• Ability to reason carefully about security boundaries, credential handling, concurrency, state management, and backward-compatible deployments.
• Clear written and verbal communication skills.

Nice to have

• Experience with authentication and authorization technologies such as OAuth 2.0, OpenID Connect, JWTs, PKCE, or policy-based access control.
• Experience with the Model Context Protocol
• Familiarity with the Cloudflare Developer Platform or other serverless edge-computing platforms.
• Experience building gateways, forward proxies, identity systems, developer platforms, or Zero Trust and data loss prevention products.

Benefits

• Eligible to participate in Cloudflare’s equity plan.

Before you apply

• Applicants who progress to the offer stage may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.
• This position may require access to information protected under U.S. export control laws.
• Any offer of employment may be conditioned on your authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and other Internet properties. The company protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.