Customer Engineering Specialist – Network Services

Cloudflare

. Serve as a trusted technical advisor for customers adopting Cloudflare network services, including Magic Transit, Cloudflare WAN, Cloudflare Network Firewall, Cloudflare Network Interconnect and Cloudflare One .

Posted 10/8/2026full-timeLisbon • PortugalMid-LevelSenior💰 €74,000 - €106,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in guiding customers through the adoption of Cloudflare network services, including solution design, proofs of concept, and technical validation. Proficient in network security, routing protocols, and multi-cloud architectures, with a strong focus on DDoS mitigation and Zero Trust solutions.

Highest-signal resume keywords

Customer Engineering ExperienceBGP KnowledgeTCP/IP TroubleshootingCloudflare Network SolutionsProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

BGPTCP/IPDDoS MitigationGREIPsecSD-WANDNSHybrid Cloud ArchitectureRouting PolicyNetwork Security

Soft Skills

CuriosityLearning AgilityProject ManagementCommunicationPrioritization

Tools & Technologies

TcpdumpWiresharkCiscoJuniperFortinetPalo Alto NetworksCheck PointSIEMNetFlowSFlow

Industry Keywords

CloudflareZero TrustSASEDDoSMPLSWANCASBWeb Application FirewallSecure Web GatewayVPN

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformTCP/IP

About the role

Key responsibilities & impact

Serve as a trusted technical advisor for customers adopting Cloudflare network services, including Magic Transit, Cloudflare WAN, Cloudflare Network Firewall, Cloudflare Network Interconnect and Cloudflare One
Lead Magic Transit and Cloudflare WAN proofs of concept from design through production cutover
Help customers modernize how they protect, connect and secure networks and sites
Advise customers on suitable Cloudflare network and security solutions
Lead qualified prospects through solution design and POC
Plan and run Magic Transit POCs covering BGP onboarding, prefix advertisement, GRE/IPsec tunnels or CNI, and DDoS validation
Plan and run Cloudflare WAN POCs covering site and branch connectivity, data center and cloud-to-site connectivity, routing design, and coexistence with or migration from SD-WAN or MPLS
Understand customer network topology, IP addressing, routing policy and security requirements and design appropriate architectures, including Azure, AWS and GCP hybrid environments
Conduct technical discovery, demonstrations and workshops during the pre-sales cycle
Support RFP/RFI responses and technical validation
Explain Cloudflare solutions against traditional DDoS scrubbing, appliance-based protection, SD-WAN, next-generation firewall, MPLS and traditional WAN alternatives
Work with GTM partners to achieve pipeline and revenue goals
Present network and security transformation messages to senior technical leaders and executives
Capture product and feature gaps and provide feedback to Product and Engineering

Requirements

What you’ll need

5+ years in Customer Engineering, Pre-sales, Solutions or Systems Engineering, or Technical Sales
Experience guiding customers through discovery, solution design, POC and handover to delivery or support
Strong working knowledge of BGP, including eBGP, route advertisement and filtering, AS paths, communities, anycast, RPKI and route hygiene
Comfortable with static and dynamic routing, subnetting, route-based policy and split tunnels
Deep understanding of TCP/IP and packet-level troubleshooting with tools such as tcpdump and Wireshark
Knowledge of MTU/MSS, GRE, IPsec, NAT and asymmetric routing
Understanding of L3/L4/L7 DDoS attack types and mitigation approaches
Familiarity with SD-WAN architectures, BGP and OSPF overlays, underlay and overlay design, local internet breakout, branch connectivity, and MPLS or legacy WAN migration
Fluent in English, written and spoken
Ability to manage projects, meet deadlines and prioritize competing goals
Curiosity and learning agility; ability to keep up with internet technology trends and Cloudflare products
Good knowledge of DNS, including authoritative and recursive resolution, DNSSEC, DNS over HTTPS/TLS, DNS-based attacks and DNS filtering
Understanding of hybrid and multi-cloud architectures involving Azure, AWS and GCP
Knowledge of end-user and application security risks, including DDoS, malware, phishing, viruses and ransomware
Knowledge of VPN and remote access challenges and Zero Trust access
Familiarity with SIEM, log analytics, NetFlow and sFlow
Experience with Cisco, Juniper, Fortinet, Palo Alto Networks and Check Point
Understanding of CDN, Web Application Firewall, remote access, next-generation firewall, CASB, DDoS mitigation, SD-WAN and secure gateway markets
Knowledge of SASE and Zero Trust networking architectures
Knowledge of Cloudflare Zero Trust solutions: Access, Gateway, Browser Isolation and WARP client deployment
Knowledge of Secure Web Gateway, CASB and DLP
Knowledge of IdP and authentication, including SAML and OTP, SaaS application integration and tenant controls
Client OS fundamentals and software distribution

Benefits

Comp & perks

Equity plan participation
In-person interview may be conducted at a Cloudflare office or hub at the offer stage
Reasonable accommodations for qualified individuals with disabilities