Senior Systems Engineer (Browser Isolation)
Cloudflare
- Cloudflare Browser Isolation runs web content in remote browsers, helping protect users from threats while preserving a responsive browsing experience. Our team builds the Chromium-based browsing engine, remote rendering and streaming technology, and distributed services that manage browser sessions across Cloudflare’s global network
- You will work at the intersection of systems programming, distributed systems, and security. Engineers contribute across the product, collaborating on browser changes, service orchestration, observability, and build infrastructure
- At this level, you will be accountable for outcomes across a problem area that may span several components. You will establish technical direction, make uncertainty and trade-offs explicit, and help other engineers succeed while remaining hands‑on. This is an individual-contributor role; people‑management experience is not required
- Technologies we use:
- Browser engine: Chromium and C++
- Systems programming: Rust
- Distributed services and orchestration: Go, TypeScript, Cloudflare Workers, Nomad, and Consul
- Remote rendering and streaming: WebRTC and Skia
- Browser client: TypeScript, WebAssembly, and WebGL
- Lead complex, multi-component initiatives from problem definition and design through implementation, staged rollout, and measurable production outcomes
- Design and implement changes in our Chromium-based C++ browser and the distributed services and systems components supporting remote browsing, working across Go, Rust, and TypeScript
- Make and explain architectural trade-offs across latency, availability, resource efficiency, security boundaries, and operational complexity
- Investigate difficult cross-layer failures and performance bottlenecks, distinguishing browser, host, network, and control‑plane causes
- Improve resilience, capacity management, observability, and release safety; define success metrics and validate results
- Coordinate work with partner teams, surface dependencies and risks early, and guide delivery through ambiguity
- Mentor engineers and raise the quality of code reviews, design reviews, testing, documentation, and operational practices
- Participate in the team’s production on‑call rotation after onboarding, lead technical incident investigations as needed, and drive durable corrective actions
- This role may require flexibility to be on‑call outside of standard working hours to address technical issues as needed
Benefits
- Competitive pay: We offer a competitive total rewards package, where every employee is an owner of our stock.
- Take‑what‑you‑need vacation: We encourage employees to find a comfortable work‑life balance by taking as many days off as they need while still being able to perform their jobs satisfactorily. (We really mean it!)
- Paid maternity & paternity leave: Our global parental leave policy allows up to sixteen paid weeks of bonding leave time for all qualifying new parents.
- Employee benefits: We offer a comprehensive benefits package including healthcare, life insurance, short‑and‑long‑term disability, pension plans in accordance with the market practice in our locations.
- Commuter program: We are flexible about where we work and value connecting at the office. Our commuter benefits program is in place to support team members’ commute to work via public transportation without the extra cost burden.
- Wellbeing: Global offerings that provide mental health, childcare and family forming support to our employees across our offices.
- Experience designing safe rollout and recovery strategies and maintaining production software over its lifecycle
- Ability to communicate trade‑offs clearly, align stakeholders, mentor teammates, and improve engineering practices through constructive feedback
- Experience designing and operating distributed systems, with sound judgment about service boundaries, data partitioning, consistency, timeouts and retries, backpressure, capacity limits, and recovery from partial failures
- A willingness to work across C++, Rust, Go, and TypeScript and learn unfamiliar parts of the stack
- Strong Linux/UNIX and networking fundamentals, with experience diagnosing correctness, latency, and resource‑consumption issues using profiling and operational evidence
- Strong production C++ proficiency, including memory and resource ownership, concurrency, and debugging in substantial codebases
- A track record of independently leading complex systems or distributed‑service improvements across multiple components, from an unclear problem to a reliable production outcome
These are preferred qualifications, not prerequisites. Prior Browser Isolation or Cloudflare experience is not required
- Browser engines, Chromium, browser sandboxing, or security‑sensitive systems
- Low‑latency streaming, graphics, remote computing, or other real‑time systems
- Go or TypeScript; WebRTC, Skia, WebAssembly, or WebGL
- Experience using Rust for systems programming or distributed services
- Container and workload orchestration, including Nomad or Kubernetes, and service discovery
- Production observability, capacity planning, incident response, or build and release infrastructure
Reference: WJ-766_23768052