Staff Site Reliability Engineer, InfraSec

MongoDB Inc.; Dublin; On-site; EUR 150,000 - 190,000; Full time

Job summary

MongoDB is seeking a Staff Site Reliability Engineer for its InfraSec team. The role focuses on hardening infrastructure, securing containerized workloads, and leading security initiatives from design through production reliability.

You will implement safeguards across runtime, CI/CD, and IaC workflows, building real-time monitoring and automated controls to protect critical platforms in multi-cloud environments.

Qualifications

• 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering.
• Track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and championing initiatives end-to-end.
• Strong coding skills in Go (Golang), Python, C, C++, or Rust.
• Proven experience building/operating large-scale distributed systems or cloud platform infrastructure.
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated provisioning.
• Experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure).

Responsibilities

• Harden hosts and containerized workloads using Linux security mechanisms and eBPF-based tooling.
• Secure containerized infrastructure across multi-cloud environments with RBAC, network policies, and admission controls.
• Build and manage automated CSPM, workload identity, vulnerability management, and access controls across AWS, Azure, and GCP.
• Write production-quality code and use Terraform to version, test, and deploy security controls as code.
• Build real-time security monitoring, logging, and alerting to detect anomalies.
• Lead initiatives from threat modeling and design to rollout and production reliability.

Skills

Go (Golang)

Python

C

C++

Rust

Distributed systems

Kubernetes

Security

Tools

Terraform

CloudFormation

Ansible

Job description

MongoDB's InfraSec team builds automated security guardrails and platform capabilities integrated into runtime, CI/CD, and Infrastructure-as-Code workflows. This Staff Site Reliability Engineer role focuses on hardening infrastructure, securing containerized workloads across multi-cloud environments, and leading security initiatives from design through production reliability.

What You'll Do

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture
• Lead initiatives across their full lifecycle from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What You Need

• Minimum 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
• Track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery
• Strong coding skills in Go (Golang), Python, C, C++, or Rust
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Nice to Have

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
• Direct ownership of Cloud Security and Workload Identity platforms
• Multi-cloud expertise spanning AWS, Azure, and GCP
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)