C

Cloudflare

Secures websites and runs apps on its network

Principal Product Manager - Certificate Authority

Full-TimeUpdated on 10/23/2026
No salary listed
Expert
London, UK+1 moreMore locations: Austin, TX, USA
HybridHybrid work; Austin or London. Offer-stage interview may require an in-person visit to a Cloudflare office or hub.
ProductTechnical Product Management
Company Historically Provides H1B Sponsorship

About the job

Requirements
  • 10+ years of product management experience building technical products for developers, security teams, infrastructure teams, enterprises, or cloud platforms.
  • Experience with security, identity, infrastructure, or developer platform products where correctness, reliability, compliance, and trust are core product requirements.
  • Working knowledge of public key infrastructure and certificate lifecycle management, including Transport Layer Security certificates, X.509, ACME, public and private certificate authorities, revocation, Certificate Transparency, mutual TLS, hardware security modules, and enterprise certificate automation.
  • Business judgment with experience defining product strategy, pricing and packaging, customer segmentation, and go-to-market plans for technical business-to-business products.
  • Ability to operate in ambiguity and create structure around a new business, including market definition, customer discovery, roadmap tradeoffs, launch planning, and executive alignment.
  • Technical fluency with engineering teams and comfort discussing APIs, distributed systems, key management, audit trails, reliability, operational failure modes, and security tradeoffs.
  • Written communication for strategy documents, product requirements, launch narratives, customer-facing messaging, and high-stakes internal decisions.
  • Judgment to move quickly and discipline to be careful when working with high-consequence certificate services.
  • This position may require access to information protected under U.S. export control laws; any offer may be conditioned on authorization to receive controlled software or technology without sponsorship for an export license.
Responsibilities
  • Define the product strategy for Cloudflare's Certificate Authority business across publicly trusted certificates, certificate lifecycle automation, ACME issuance, renewal workflows, revocation, Certificate Transparency, customer controls, developer experience, and integrations with Cloudflare's broader platform.
  • Understand the needs of developers, site owners, platform teams, SaaS providers, enterprise security teams, infrastructure operators, and partners who depend on certificates for availability, security, and compliance.
  • Design product requirements that fail small, reduce customer blast radius, support automated recovery, and make certificate replacement fast enough to handle compliance issues, revocation events, or ecosystem incidents.
  • Drive an ACME-first customer experience that makes it easy for users of existing free or automated certificate authorities to adopt Cloudflare with minimal tooling changes.
  • Partner with engineering on systems that manage certificate lifecycles, automate issuance and renewal, integrate with hardware security modules, protect keys, support auditability, and operate within strict reliability and correctness requirements.
  • Partner with compliance, legal, security, and operations to ensure product decisions align with CA/Browser Forum Baseline Requirements, WebTrust audits, root store program policies, Certificate Policy and Certification Practice Statement commitments, and public incident response expectations.
  • Own go-to-market strategy, including packaging, pricing, launch sequencing, competitive positioning, customer segmentation, sales enablement, developer messaging, and adoption metrics.
  • Represent the customer and ecosystem in product decisions balancing trust, transparency, uptime, security, and commercial adoption.
  • Work across Cloudflare product teams, including SSL/TLS, Application Security, Zero Trust, Workers, Registrar, DNS, Load Balancing, SaaS products, and infrastructure teams that consume or expose certificate services.
  • Ensure Cloudflare's own use of the certificate authority exercises the product at Cloudflare scale and informs the roadmap before customers depend on it.
Desired Qualifications
  • Direct experience working on certificate authority, public key infrastructure, certificate lifecycle management, cloud security, identity, or trust services products.
  • Experience with publicly trusted certificate authorities, private public key infrastructure, managed certificate services, or platforms such as AWS Certificate Manager, AWS Private CA, Google Trust Services, DigiCert, Sectigo, Let's Encrypt/ISRG, Entrust, Microsoft PKI, HashiCorp Vault PKI, step-ca, or CFSSL.
  • Familiarity with CA/Browser Forum requirements, browser root programs, WebTrust for CAs, WebTrust Baseline Requirements, or public certificate authority incident reporting.
  • Experience building API-first developer products, especially products involving ACME, software development kits, command-line workflows, Kubernetes, service mesh, mutual TLS, or infrastructure-as-code integrations.
  • Experience launching new businesses or zero-to-one products inside a larger platform company.
  • Familiarity with certificate automation challenges created by 90-day and shorter certificate lifetimes.
  • Familiarity with post-quantum cryptography, crypto-agility, Merkle Tree Certificates, or customer migration planning for cryptographic transitions.
  • Prior participation in WebPKI, IETF, browser trust, transparency, or security standards communities.

About the company

C

Cloudflare

View
cbWebsite

Cloudflare operates a network that protects websites, delivers online content and runs applications closer to their users. Businesses connect websites and internal systems to its services to filter malicious traffic, control access and improve performance, with security and computing running on shared infrastructure. Developers combine application code, object storage and databases with the network used for content delivery and traffic protection. Cloudflare earns revenue from subscriptions and usage charges, with free plans for basic features and negotiated contracts for larger organizations. Cloudflare was founded in 2009 and is headquartered in San Francisco, California.

Company Size

1,001-5,000

Company Stage

IPO

Headquarters

San Francisco, California

Founded

2009

Get referred to Cloudflare

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Demand is growing: Cloudflare reported $696 million revenue, up 36%, for the June 2026 quarter.
  • New parents get paid bonding time: qualifying Cloudflare employees receive up to sixteen paid weeks globally.
  • Attack protection has predictable billing: Cloudflare provides unmetered DDoS mitigation across all plans, including its free tier.

What critics are saying

  • Employees faced a major workforce reduction: Cloudflare announced more than 1,100 global job cuts in May 2026.
  • One software fault spread widely: Cloudflare's bot-management configuration broke core network traffic in November 2025.
  • Free users still incur costs: most Cloudflare customers pay nothing, while the company bears incremental network expenses.

What makes Cloudflare unique

  • Services share network locations: Cloudflare runs its security and delivery stack in every data center.
  • R2 makes outbound bandwidth free: Cloudflare charges for storage and requests, without fees for direct Internet data transfers.
  • Workers handles deployment and scaling: developers publish apps across Cloudflare's global network without managing servers.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Competitive salaries
  • Take-what-you-need paid vacation policy
  • Comprehensive health plans and benefits
  • Paid maternity and paternity leave
  • Commuter and ride share options
  • Returnships

Growth & Insights and Company News

6 month growth

0%

1 year growth

0%

2 year growth

0%
StartupHub AI
Oct 21st, 2026
Cloudflare turned on WebMCP for 100,000 stores.

Cloudflare turned on WebMCP for 100,000 stores. Cloudflare says it enabled WebMCP at the edge for almost 100,000 Commerce.com storefronts to let shopping agents call tools instead of scraping HTML. StartupHub.ai Staff Cloudflare says it switched on WebMCP across almost 100,000 Commerce.com storefronts at the edge. The rollout builds on an August beta that injects a tiny script without merchant code changes, according to Cloudflare. Kristina Pototska, product management director at Commerce.com, said merchants want to stay in the checkout and keep customer control. "Merchants keep asking us how they can keep up with agentic shopping," Pototska said, per Cloudflare. WebMCP is a Google proposed browser standard still behind chrome://flags and Chrome Origin Trials, per Cloudflare. Partner Paid placement Agents previously scraped HTML, guessed buttons, and burned tokens on cookie banners and bot challenges. With WebMCP the agent calls search_products and add_to_cart on document.modelContext inside the shopper session. Commerce.com proxies tool definitions from its backend MCP server through Cloudflare so merchants keep logic control. Cloudflare had to add per-store opt-outs because Commerce.com runs thousands of vanity domains on shared zones via Cloudflare for SaaS. The same rollout was framed Oct. 21 as bringing AI assistants to BigCommerce merchants, reported by GlobeNewswire and not in the Cloudflare post. WebMCP remains in early preview with no general availability date while browsers keep it behind experimental flags. (C) 2026 StartupHub.ai. All rights reserved. You may not republish this article in full without a license. Search engines and AI research tools may crawl and summarize for reference. Bulk reproduction or model training requires a license. See our terms. The videos behind the news, one flip at a time. The feed mixes the videos from our articles with startup demos and you flip through them like TV channels for free with no signup. Discussion. Join the conversation below StartupHub.ai Staff Editorial team The staff writers of StartupHub.ai, ranging from investment analysts to avid AI tool users, early adopters and critical enthusiasts. Backgrounds span engineering, business and the arts. We hold every piece to rigorous standards of research and review.

GlobeNewswire
Oct 21st, 2026
Commerce and Cloudflare bring AI shopping assistants to BigCommerce merchants' online stores with WebMCP.

Commerce and Cloudflare bring AI shopping assistants to BigCommerce merchants' online stores with WebMCP. Shoppers' browser-based AI agents can now find products and fill a cart on merchants' own stores while the checkout remains on the storefront. AUSTIN, Texas, Oct. 21, 2026 (GLOBE NEWSWIRE) - Commerce.com (Nasdaq: CMRC), the open commerce ecosystem built to help merchants win as AI reshapes how customers discover and buy, today announced a partnership with Cloudflare that lets AI agents in a customer's web browser search, compare and shop directly on BigCommerce merchants' online stores with no setup required. The new functionality is turned on by default for eligible BigCommerce merchants. Shoppers increasingly ask AI agents to find and compare products for them, but most online stores were designed for people to read and click, which leaves agents guessing at buttons and forms. WebMCP is a standard that lets a website tell a shopper's browser agent directly what it sells and what it can do. For example, a shopper might ask their browser agent to "find a lightweight jacket in my size under $150." The agent can search the store's actual products and prices, add the best match to a cart and hand back a link to complete checkout on the merchant's store. For merchants, that means showing up when shoppers use AI to shop with accurate prices and stock pulled directly from the store. Merchants don't need to write code or change their site. Checkout, the customer relationship and the brand stay with the merchant. Merchants can turn off the feature in a new settings menu, which also manages all of Commerce's AI connections. "Every AI assistant is about to become a shopping assistant, and most of them are still guessing their way through storefronts the way a bot would, clicking and scraping and getting prices and inventory wrong," said Sharon Gee, senior vice president of product for AI at Commerce. "WebMCP replaces guessing with a handshake. A shopper's agent asks the store directly for what's in stock at what price in which sizes, and the store answers accurately. With this partnership, every merchant on our platform gets that handshake automatically, with no code to write and no changes to their site. Shoppers get agents that work the way they expect, and merchants stay in control of their catalog, their customers, and the sale. Commerce is ensuring our customer sites are agent-ready by default." "The web is being rebuilt for AI agents, and it's on platforms like BigCommerce and Cloudflare to handle that shift so merchants can focus on running their business," said Matthew Conroy, senior director at Cloudflare. "Together, we're giving every merchant a way to tell a shopper's agent exactly what their store can do, on their own site and on their own terms. We think that's how the agent-ready web should work: built on open standards with the site owner in control." WebMCP builds on the existing BigCommerce MCP Toolkit, which gives agents access to functions they can use to complete real-world tasks. For eligible B2C and B2B stores, BigCommerce's server-side Storefront MCPs expose shopping actions to agents connecting from outside the storefront, while WebMCP brings those actions to agents working directly in the shopper's browser. The partnership is part of Commerce's broader work to help merchants prepare their catalogs for emerging discovery experiences, reach shoppers across new channels, and support paths to purchase. About Commerce Commerce (Nasdaq: CMRC) empowers businesses to innovate, grow, and thrive by providing an open, AI-driven commerce ecosystem. As the parent company of BigCommerce, Feedonomics, and Makeswift, Commerce connects the tools and systems that power growth, enabling businesses to unlock the full potential of their data, deliver seamless and personalized experiences across every channel, and adapt swiftly to an ever-changing market. Trusted by leading businesses like Coldwater Creek, Cole Haan, Dell, Harvey Nichols, King Arthur Baking Co., Mizuno, Pacsun, Perry Ellis, Skechers, SportsShoes and Uplift Desk, Commerce delivers the storefront control, optimized data, and AI-ready tools businesses need to grow, serve diverse buyers, and operate with confidence in an increasingly intelligent, multi-surface world. For more information, visit www.commerce.com or follow us on X and LinkedIn. BigCommerce(R), the Commerce logo, and other brands are the trademarks or registered trademarks of Commerce.com Pty. Ltd. Third-party trademarks and service marks are the property of their respective owner.

SaasRise
Oct 21st, 2026
Cloudflare's Rust Port of TypeScript Promises 8x Speed Boost for AI-Assisted SaaS Security.

Cloudflare's Rust Port of TypeScript Promises 8x Speed Boost for AI-Assisted SaaS Security. SaasRise - Oct 21, 2026 Cloudflare announced tsrs, a Rust-rewritten TypeScript compiler that delivers up to eight times the speed of Microsoft's 7.0 release while using 70% less memory. The move targets AI-driven development agents and reinforces Cloudflare's edge-focused SaaS security stack. Why it matters. The tsrs project illustrates how edge-first SaaS providers can leverage language-level performance gains to tighten security and reduce operational costs. By moving type-checking onto the edge, Cloudflare helps SaaS firms mitigate the latency and data-exposure risks inherent in sending code to centralized CI services. Moreover, the collaborative model with Microsoft demonstrates a new paradigm where open-source contributions can accelerate both parties' product roadmaps, fostering a tighter integration between cloud infrastructure and developer tooling. For investors and operators, the development underscores the growing importance of AI-native development stacks. Companies that embed AI-assisted code validation into their core platforms will likely enjoy higher net retention and lower churn, as developers experience faster iteration cycles and fewer security incidents. Cloudflare's move could therefore set a benchmark for other SaaS security vendors seeking to differentiate through performance-driven, edge-centric solutions. Key points. * Cloudflare claims tsrs is up to 8x faster than TypeScript 7.0 and uses 70% less memory. * Director of engineering Christoph Nakazawa stresses the effort is a collaborative port, not a fork. * Microsoft's Daniel Rosenwasser acknowledges tsrs-derived optimizations will speed up TypeScript 7.1. * Rust's Wasm compatibility enables full development environments inside Cloudflare Workers sandboxes. * The initiative aligns with Cloudflare's broader JavaScript ecosystem, including the Void platform for AI-built apps. Analysis. Cloudflare's Rust rewrite of the TypeScript compiler is more than a technical curiosity; it's a strategic play to embed AI-driven development directly into the edge. Historically, SaaS security tools have relied on centralized CI pipelines, which add latency and expand the attack surface. By shifting type-checking to a lightweight, Wasm-compatible runtime, Cloudflare reduces both cost and risk, a combination that resonates strongly with operators focused on expansion revenue and margin preservation. The collaboration with Microsoft also hints at a future where infrastructure providers and language maintainers co-engineer performance improvements. This could accelerate a feedback loop where optimizations discovered in one implementation are rapidly back-ported, raising the overall baseline for developer productivity across the industry. For SaaS founders, the message is clear: investing in AI-native, edge-first tooling can create defensible moats that are hard to replicate without comparable infrastructure. Looking ahead, the real test will be adoption. If Cloudflare can demonstrate measurable cost savings for high-scale SaaS customers - especially those running AI-generated code at the edge - it may spur a wave of similar rewrites for other critical developer tools. That would reinforce a broader market trend toward AI-native stacks, where performance, security, and cost efficiency converge on the edge, reshaping the competitive dynamics of the SaaS ecosystem.

Crypto.com
Oct 20th, 2026
Mastercard develops agent payments for AI services via.

Mastercard develops agent payments for AI services via. News Tue, 20 Oct 2026 20:00:48 UTC 1 hour ago Mastercard is collaborating with Cloudflare to develop a system called Agent Pay for Machines, which allows AI agents to pay for digital services. This innovative payment solution aims to enhance Mastercard's capabilities in the digital finance space and could significantly affect crypto adoption. More details can be found in the original tweet. Breaking it down. The broader crypto market is currently displaying mixed signals, with varying momentum across major assets. Mastercard's initiative to build agent payments with Cloudflare comes at a time when the integration of AI in financial services is gaining traction. This development signals a potential shift in how digital transactions might be conducted, setting the stage for greater adoption of cryptocurrency in everyday transactions. The partnership aims to streamline payments, showcasing Mastercard's commitment to incorporating cutting-edge technology into its offerings. Quick take. * Mastercard is collaborating with Cloudflare on Agent Pay for Machines. The initiative allows AI agents to handle payments for digital services. This integration is expected to enhance payment processing capabilities. The announcement reflects Mastercard's ongoing efforts to innovate in the payment sector. Cloudflare's technology will support this new payment solution. By the numbers. Currently, the crypto market is experiencing fluctuations, with significant focus on institutional adoption. While specific volume and price movements are not reported, Mastercard's partnership with Cloudflare could influence market sentiment positively. Traders are likely observing this development closely, as increased adoption of AI in payments may lead to enhanced utility for digital currencies in various sectors. ... Continue reading the full article at the original source below. This content is automatically aggregated. Full credit goes to the original publisher (coinfomania.com).

Tech in Asia
Oct 20th, 2026
Cloudflare adds Asana, Box, GitHub and more integrations to its Cloudflare OS AI workspace

Cloudflare said on October 20 that it expanded the partner network for Cloudflare OS, its AI workspace for enterprises. The new integrations help companies connect internal software and deploy AI workflows. The integrations include Asana, Box, Canva, ClickHouse, GitHub, Gong, Notion, and ZoomInfo. Administrators can connect these systems with limited data access, while using Cloudflare's AI Gateway to manage AI model usage. Cloudflare is also working with EPAM, a US-headquartered software engineering and IT services firm; Happy Cog, a US digital product agency; and Towards AI, an AI training and consulting company. The partnerships aim to help customers deploy the platform and train teams to use AI tools in existing workflows.