Cloudflare WAF Engineer

Title:  Cloudflare WAF Security Engineer

Location: Lisle, IL or Columbia, MD (Hybrid Mon–Thurs)

Duration: 6 month contract to hire

Requirements:

Key Skills: Cloudflare Administration, WAF tuning, DNS, GCP or AWS

Location: Lisle, IL or Columbia, MD (Hybrid Mon–Thurs)

Contract: 6-month CTH

Focus: 80% Cloudflare / WAF, 20% cloud (mostly GCP)

Key Needs (What the HM Actually Wants)

• Heavy Cloudflare administration (DNS, proxying, certs, traffic routing).
• WAF tuning: reviewing logs, identifying false positives, testing with app teams, and slowly moving from “log-only” to enforcement mode.
• Ability to work across teams to troubleshoot when WAF blocks valid traffic.
• Strong DNS experience: zones, records, multi-DNS setups, troubleshooting SOA/TTL issues.
• Familiar with GCP (primary), some AWS is fine.
• Comfortable analyzing logs (Cloudflare logs, traffic patterns, etc.).
• Experience with security/compliance environments (PII, HIPAA, SOC, etc.).

Environment / Context

• Client uses Cloudflare heavily for DNS and proxying.
• Their WAF is currently in log-only mode and has never been fully tuned.
• Internal audit flagged the lack of WAF actions—this role is meant to close that gap.

Ideal Background

• 2 years Cloudflare admin experience
• Direct WAF tuning and log analysis
• DNS-heavy roles
• Web security or network security background
• Cloud experience (preferably GCP)