Cloudflare

systems engineer, MCP Portals

In short

Systems engineer role at Cloudflare building and operating distributed services for MCP Server Portals, which connect AI agents to internal and third-party tools securely. The job covers authentication/authorization flows, multi-tenant reliability and scalability, production support, and incident response on the Cloudflare Developer Platform. It requires at least 4 years of experience with distributed systems and production services, strong skills in TypeScript, JavaScript, Go, Rust, or C++, and solid understanding of HTTP, APIs, and security boundaries. The position is hybrid, based in Lisbon, Portugal.

About the Role
Cloudflare operates a global network that protects and accelerates Internet applications. Its MCP Server Portals provide organizations with a secure, centralized way to connect AI agents to internal and third-party tools.
Responsibilities
•Design, implement, and operate distributed services connecting MCP clients to authorized upstream MCP servers
•Own scoped features and service improvements through design, implementation, testing, rollout, observability, and production follow-up
•Evolve the implementation as the MCP specification changes while maintaining compatibility for existing customers and integrations
•Build secure authentication and authorization flows involving Cloudflare Access, OAuth, identity, and delegated access to upstream services
•Improve the reliability, scalability, latency, and resource efficiency of multi-tenant systems on the Cloudflare Developer Platform
•Use structured logs, metrics, traces, dashboards, and alerts to understand service behavior; participate in production support and incident response
•Investigate customer issues across multiple services, distinguishing product defects from upstream failures, policy configuration, and infrastructure dependencies
•Collaborate with product, security, and engineering partners to turn customer needs and emerging standards into maintainable product capabilities
Requirements
•At least 4 years of experience building and operating distributed systems, backend services, network services, or infrastructure products in production
•Strong programming skills in TypeScript, JavaScript, Go, Rust, C++, or another language used to build production services
•Experience independently delivering changes to a production service, including testing, deployment, monitoring, and follow-up
•Solid understanding of HTTP, APIs, proxies, streaming connections, and common distributed-systems failure modes
•Experience debugging production systems using logs, metrics, traces, error reporting, and customer-provided evidence
•Ability to reason carefully about security boundaries, credential handling, concurrency, state management, and backward-compatible deployments
•Clear written and verbal communication skills, including the ability to explain technical tradeoffs and coordinate work across team boundaries
Nice to Have
•Experience with authentication and authorization technologies such as OAuth 2.0, OpenID Connect, JWTs, PKCE, or policy-based access control
•Experience with the Model Context Protocol
•Familiarity with the Cloudflare Developer Platform or other serverless edge-computing platforms
•Experience building gateways, forward proxies, identity systems, developer platforms, or Zero Trust and data loss prevention products
Conditions
•Equity plan participation is available
•Offer-stage candidates may be asked to attend an in-person interview at a Cloudflare office or hub
•Employment offers may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot