Senior Site Reliability Engineer, InfraSec

MongoDB Inc.; Dublin; On-site; EUR 140,000 - 190,000; Full time

Job summary

MongoDB is seeking a Senior Site Reliability Engineer for Infrastructure Security (InfraSec) to build security infrastructure and automated controls protecting Atlas across AWS, Azure, and GCP. The role involves creating security primitives and platform capabilities integrated into CI/CD, IaC workflows, and platform runtime.

The ideal candidate will have 5+ years in SRE or cloud security with strong Go, Python, C, C++, or Rust skills, plus hands-on Terraform, CloudFormation, or Ansible

Qualifications

• Minimum 5+ years in SRE, infrastructure engineering, or cloud security.
• Strong coding skills in Go, Python, C, C++, or Rust.
• Hands-on experience with Terraform, CloudFormation, or Ansible for automated provisioning.

Responsibilities

• Harden hosts and container workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon).
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
• Build and manage automated CSPM, workload identity, vulnerability management, and access controls across AWS, Azure, and GCP.
• Write production-quality code and use IaC (Terraform) to version, test, and deploy security controls as code.
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale.
• Lead initiatives across threat modeling, architecture, implementation, rollout, and production reliability.

Skills

Go

Python

C

C++

Rust

Distributed systems

Tools

Terraform

CloudFormation

Ansible

Job description

MongoDB is seeking a Senior Site Reliability Engineer for Infrastructure Security (InfraSec) to build security infrastructure and automated controls protecting MongoDB Atlas across AWS, Azure, and GCP. The role involves developing security primitives and platform capabilities that integrate directly into CI/CD, IaC workflows, and platform runtime.

What You'll Do

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
• Lead initiatives across their full lifecycle from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What You Need

• Minimum 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
• Strong coding skills in Go (Golang), Python, C, C++, or Rust
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Nice to Have

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
• Direct ownership of Cloud Security and Workload Identity platforms
• Multi-cloud expertise spanning AWS, Azure, and GCP
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)