Intuit is the global financial technology platform that powers prosperity for the people and communities we serve. Behind our public-facing products — TurboTax, Credit Karma, QuickBooks, and Mailchimp — is an edge and perimeter layer (CDN, WAF, DNS, and SSL/TLS) that protects and accelerates traffic for approximately 100 million customers.
We are hiring a Staff Software Engineer with deep Akamai CDN & WAF expertise, a strong networking foundation, and hands-on software engineering skills. Sitting within Cloud Engineering & Operations, this role is integral to protecting and accelerating Intuit's public-facing traffic and to keeping critical network services always available to developers. Most importantly, you will help build and manage a CDN/WAF 'paved road' that automatically onboards public endpoints to Akamai and recommends optimized edge configurations to development teams. You will design self-service applications and engineer, deploy, and support the corresponding APIs and UIs. As a Staff engineer, you will not just execute this work manually but direct, orchestrate, and govern AI agents to build and operate it faster, accountable for the quality and reliability of everything you and those agents produce.
Responsibilities
- Build the CDN/WAF paved road, automate onboarding of public endpoints to Akamai, with tooling that recommends and optimizes edge/CDN configurations for development teams
- Engineer & tune edge security policies, WAF, bot-management, client-reputation, and rate-control policies (Akamai Kona / App & API Protector and AWS WAFv2), balancing security with false-positive and blast-radius risk
- Design self-service platforms, engineer and support self-service applications, APIs, and UIs for edge, DNS, and certificate workflows
- Own DNS & certificate lifecycle, support and improve DNS, SSL/TLS certificate lifecycle (ACM/Venafi/DigiCert, including mTLS), CDN, and network-connectivity solutions
- Troubleshoot the full packet path, diagnose connectivity issues across the edge and cloud network (CDN origin/SiteShield, DNS resolution, TLS, Transit Gateway routing), with the ability to reason about the full path and analyze captures
- Automate compliance & cost, engineer policies to report or auto-remediate compliance and cost issues, and drive proactive, continuous performance tuning of Cloud Platform services
- Encode knowledge into agents, build agentic and self-service tooling that turns team knowledge into reusable patterns so standards travel with the automation
- Provide 24x7 incident response for critical edge/Platform Services, including off-hours migration and cutover windows
- Partner with vendors & internal teams, work closely with vendors (e.g., Akamai) and internal development teams to define operational support models and escalation paths
- Mentor & influence, stay abreast of new technologies, recommend best practices, and mentor engineers, including coaching on how to break work into pieces that agents can execute reliably
Qualifications
- BS in Computer Science or equivalent work-related experience
- Deep hands-on Akamai expertise, Property Manager/Ion, Kona / App & API Protector (WAF), Bot Manager, Client Reputation, CPS certificates, EdgeWorkers, SiteShield, and the PAPI/{OPEN} APIs
- Strong networking foundation and troubleshooting of TCP/IP, HTTP/2, DNS (Route 53, delegation, CNAME chains, split-horizon), SSL/TLS and mTLS, CDN origin/edge routing, VPN, AWS Transit Gateway/VPC routing, BGP, and SSH
- A software engineer who can build, not just operate, proficient in scripting/development (Full Stack preferred), specifically Python, Golang, React, and Java, and building and owning REST APIs, UIs, and MSaaS services
- Background with Infrastructure as Code (CloudFormation, AWS CDK, Terraform), deployment automation (CodeBuild, Jenkins), and an understanding of GitOps
- Hands-on AWS experience (API Gateway, CloudFront, ACM, ALB/NLB, Lambda, WAFv2, IAM); knowledge of Google GCP and Microsoft Azure preferred
- Fluent in AI agent development and orchestration, able to build agentic/self-service tooling (e.g., MCP servers and skills) and to review AI-generated output to the same quality bar as peer code
- Experience operating a production support/on-call surface with formal change management, incident RCA, and clear customer-facing communication
- Staff-level candidates additionally: own the technical vision for a domain or system across multiple teams, engineer closed-loop agentic workflows that reduce manual toil, and drive operational excellence and quality guardrails beyond their own team
Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender.
The expected base pay range for this position is:
San Diego $188,500 - $255,000