Highlights
Build the baseline: Configure Cloudflare One, including IdP integration, device posture providers, WARP client settings, Logpush to the SIEM/MDR (ReliaQuest), and dedicated egress IPs. - Connect sites: Deploy Cloudflare Tunnels and Cloudflare WAN (Magic WAN) IPsec tunnels across data centers and WAN sites.
Numbers & Facts
| Location | (Remote) |
| Job Type | Contractor |
| Salary | $40 Per Hour |
| Company Size | 11 - 50 |
| Headquarters | Torrance, CA, US |
| Website | https://www.offsoar.com |
Description
- Build the baseline: Configure Cloudflare One, including IdP integration, device posture providers, WARP client settings, Logpush to the SIEM/MDR (ReliaQuest), and dedicated egress IPs.
- Migrate web security: Design and migrate SWG and DLP policies from Cisco Umbrella, including TLS inspection and Do-Not-Inspect lists.
- Roll out WARP in waves: Deploy through Intune in phases, starting with a 1,000-user pilot and then 5,000, 14,000, and 10,000 seats.
- Connect sites: Deploy Cloudflare Tunnels and Cloudflare WAN (Magic WAN) IPsec tunnels across data centers and WAN sites. Route site traffic through Cloudflare SWG and validate route propagation and failover.
- Replace VPN access: Migrate ZTNA application access policies from Cisco and Fortinet VPN into Cloudflare Access, and run the pilot and full production rollout.
- Cut over DNS: Migrate internal DNS zones and records.
- Integrate: Connect CrowdStrike (device posture), Microsoft Intune, and Microsoft Purview (label matching for DLP).
- Hand off: Run testing playbooks, produce deployment verification reports, and deliver knowledge-transfer workshops to client IT and Security teams.
Qualifications
- Cloudflare Zero Trust / Cloudflare One
- Cloudflare Gateway (SWG), Access (ZTNA), WARP Client, DLP, Tunnels (cloudflared)
- Cloudflare WAN (Magic WAN)
- Cloudflare Certifications / Partner Delivery
- CrowdStrike Falcon, Microsoft Intune, Microsoft Purview
- SASE and Zero Trust Architecture (10,000+ seats)
- TCP/IP, BGP, Static Routing, DNS, TLS/SSL Inspection, Proxies, IPsec
- IPsec/GRE Tunnels, Routing, and Failover Design
- Legacy VPN/SWG Migration (Cisco AnyConnect/Umbrella, FortiClient/FortiGate)
- Entra ID (Azure AD), Okta, SAML/OIDC, and Device Posture Checks
- Logpush and SIEM Integration
- Large-Scale Agent Rollouts and Enterprise Change Management
- High-Level Designs (HLDs), Runbooks, and Training Materials
About Company
Offsoar is a global technology consulting and IT staff augmentation company dedicated to helping enterprises
modernize their operations through data, cloud, AI, and digital transformation solutions. Our flexible delivery
models (onsite, offshore, and nearshore) and deep industry expertise enable us to drive measurable outcomes.
✔ Reducing IT and operational costs
✔ Accelerating digital transformation
✔ Building high-performance data analytics platforms
✔ Implementing Generative AI-based intelligent solutions
Our Vision
To be the global partner of choice for consulting, IT staff augmentation, and digital solutions across offshore, nearshore, and onsite delivery models.
