Customer Engineering Specialist - Network Services

As a CE Specialist you will be the trusted technical advisor for customers adopting Cloudflare's network services. These include Magic Transit, Cloudflare WAN, Cloudflare Network Firewall and Cloudflare Network Interconnect (CNI), alongside Cloudflare One. You will lead Magic Transit and Cloudflare WAN POCs from design through to production cutover. You will also help customers modernize how they protect, connect and secure their networks and sites.

Responsibilities

Act as a trusted advisor, helping customers choose the right Cloudflare network and security solution for their business needs; Lead qualified prospects through Solution Design and POC; Magic Transit: plan and run POCs covering BGP onboarding, prefix advertisement, GRE/IPsec tunnels or CNI, and DDoS validation; Cloudflare WAN: plan and run POCs covering site and branch connectivity, data center and cloud-to-site connectivity, routing design, and coexistence with or migration from existing SD-WAN or MPLS; Understand the customer's network topology, IP addressing, routing policy and security requirements, and design an architecture that fits, including hybrid environments with Azure, AWS and GCP; Run technical discovery, demos and workshops as part of the pre-sales cycle; Support RFP/RFI responses and technical validation; Explain the benefits of Magic Transit, Cloudflare WAN and Cloudflare One compared with alternative approaches; Work with GTM partners to consistently achieve pipeline and revenue goals; Present network and security transformation messages to senior technical leaders and executives; Capture product and feature gaps and feed them back to Product and Engineering

Requirements

GTM experience: 5+ years in Customer Engineering, Pre-sales, Solutions or Systems Engineering, or Technical Sales; Experience guiding customers through discovery, solution design, POC and handover to delivery or support; Strong working knowledge of BGP (eBGP, route advertisement and filtering, AS paths, communities, anycast, RPKI and route hygiene); Comfortable with static and dynamic routing, subnetting, route-based policy and split tunnels; Deep understanding of the TCP/IP protocol stack and packet-level troubleshooting (for example with tcpdump and Wireshark), including MTU/MSS, tunneling (GRE, IPsec), NAT and asymmetric routing; Understanding of L3/L4/L7 DDoS attack types and mitigation approaches, and how on-demand and always-on protection differ; Familiarity with SD-WAN architectures and routing protocols (BGP and OSPF overlays), underlay and overlay design, local internet breakout, branch connectivity, and migration from MPLS or legacy WAN; Fluent in English, written and spoken; Ability to manage a project, work to deadlines and prioritize between competing goals; Curiosity and learning agility

Nice to have

DNS knowledge, including authoritative and recursive resolution, DNSSEC, DNS over HTTPS/TLS, DNS-based attacks and DNS filtering; Understanding of the path from user to application, including hybrid and multi-cloud architectures (Azure, AWS, GCP); Knowledge of end-user and application security risks (DDoS, malware, phishing, viruses, ransomware); VPN and remote access challenges, and moving to Zero Trust access; SIEM and log analytics platforms, and network telemetry such as NetFlow and sFlow; Experience and knowledge with network and security vendors including Cisco, Juniper, Fortinet, Palo Alto Networks, and Check Point; Understanding of the market for CDN providers, Web Application Firewalls, remote access solutions, next-generation firewalls, CASB, DDoS mitigation, SD-WAN and secure gateway solutions; SASE concepts and Zero Trust networking architectures; Knowledge of Cloudflare Zero Trust solutions (Access, Gateway, Browser Isolation, WARP client deployment); Secure Web Gateway, CASB and DLP; IdP and authentication (SAML, OTP), plus SaaS application integration and tenant controls; Client OS fundamentals and software distribution; Additional languages are a plus

Benefits

Eligible to participate in Cloudflare's equity plan