Staff Cloud Software Engineer – Edge, CDN & WAF

Staff Cloud Software Engineer – Edge, CDN & WAF

Company Overview

Intuit is the global financial technology platform that powers prosperity for the people and communities we serve. With approximately 100 million customers worldwide using products such as TurboTax, Credit Karma, QuickBooks, and Mailchimp, we believe that everyone should have the opportunity to prosper. We never stop working to find new, innovative ways to make that possible.

Job Overview

Intuit is the global financial technology platform that powers prosperity for the people and communities we serve. Behind our public-facing products — TurboTax, Credit Karma, QuickBooks, and Mailchimp — is an edge and perimeter layer (CDN, WAF, DNS, and SSL/TLS) that protects and accelerates traffic for approximately 100 million customers.

We are hiring a Senior to Staff Software Engineer with deep Akamai CDN & WAF expertise, a strong networking foundation, and hands-on software engineering skills. Sitting within Cloud Engineering & Operations, this role is integral to protecting and accelerating Intuit's public-facing traffic and to keeping critical network services always available to developers. Most importantly, you will help build and manage a CDN/WAF "paved road" that automatically onboards public endpoints to Akamai and recommends optimized edge configurations to development teams. You will design self-service applications and engineer, deploy, and support the corresponding APIs and UIs. As a Sr/Staff engineer, you will not just execute this work manually but direct, orchestrate, and govern AI agents to build and operate it faster, accountable for the quality and reliability of everything you and those agents produce.

Responsibilities

• Build the CDN/WAF paved road, automate onboarding of public endpoints to Akamai, with tooling that recommends and optimizes edge/CDN configurations for development teams
• Engineer & tune edge security policies, WAF, bot-management, client-reputation, and rate-control policies (Akamai Kona / App & API Protector and AWS WAFv2), balancing security with false-positive and blast-radius risk
• Design self-service platforms, engineer and support self-service applications, APIs, and UIs for edge, DNS, and certificate workflows
• Own DNS & certificate lifecycle, support and improve DNS, SSL/TLS certificate lifecycle (ACM/Venafi/DigiCert, including mTLS), CDN, and network-connectivity solutions
• Troubleshoot the full packet path, diagnose connectivity issues across the edge and cloud network (CDN origin/SiteShield, DNS resolution, TLS, Transit Gateway routing), with the ability to reason about the full path and analyze captures
• Automate compliance & cost, engineer policies to report or auto-remediate compliance and cost issues, and drive proactive, continuous performance tuning of Cloud Platform services
• Encode knowledge into agents, build ag