Systems Architecture at Cloudflare
Pingora serves over 40 million HTTP/QUIC requests per second across Cloudflare's global anycast network, cutting CPU usage by 70% compared to our legacy NGINX architecture through multi-threaded connection reuse.
Design and implement zero-copy L4/L7 proxy architecture using Rust, Pingora, Tokio, XDP/eBPF, and Quiche across 330+ global edge cities. Base pay for this remote role sits at $215,000 to $295,000 USD plus equity.
What You Will Own in Production
- Architect zero-copy splice/sendfile paths in Pingora, harden HTTP/3 Quiche congestion control, and write eBPF socket-steering filters.
- Profile CPU cache misses, syscall bottlenecks, and tail latency spikes across Tokio, Hyper, Quiche services using hardware perf counters and flamegraphs.
- Review architectural RFCs and maintain strict memory-safety invariants in async and unsafe Rust blocks.
Background We Look For
- Production track record shipping low-level systems in Rust, C, or C++ with deep fluency in Tokio, Hyper, Quiche, eBPF, rustls.
- Hands-on experience debugging Linux kernel networking, NVMe storage, or GPU compute pipelines under heavy load.
- Compensation: $215,000 to $295,000 USD per year, equity grant, and full remote workstation budget (Worldwide Remote).
