Cloud Platform Engineer

Engg; Palo Alto (CA); On-site; USD 158,000 - 237,000; Full time

Job summary

Rubrik is building Agent Cloud, a secure, scalable enterprise platform to monitor, govern, and remediate AI agents across clouds. You’ll shape secure cloud foundations, governance, and automation, partnering with teams to onboard new business units and enforce compliance at scale.

Applicants should bring 2+ years in CloudOps or software architecture, strong IaC skills with Terraform and GitHub Actions, and deep experience with multi-cloud IAM and cost optimization.

Qualifications

• BS/MS in Computer Science or related field, or equivalent practical experience.
• 2+ years of CloudOps, Engineering, or Software Architecture experience with deep cloud expertise.
• Experience in multi-cloud IAM, Org/Project design, security policies, logging/monitoring, and access controls.

Responsibilities

• Design and govern secure cloud foundations across AWS, Azure, GCP, and OCI for onboarding new units and teams.
• Drive implementation of secure landing zones, multi-account structures, IAM and policies.
• Enforce tagging standards, resource hierarchy models, and governance frameworks for cost tracking and lifecycle management.
• Manage and evolve IAM, SSO, Org/Subscription/Project policies, and RBAC across clouds.
• Embed security and compliance at scale with encryption, KMS, VPC Service Controls, PIM, and audit logging.
• Address vulnerabilities and misconfigurations in collaboration with InfoSec teams and conduct audits.
• Lead periodic compliance audits and craft mitigation/remediation strategies.
• Drive automation with IaC templates and pipelines using Terraform, CloudFormation, Flux, GitHub Actions, ArgoCD to support Cloud Operations.
• Identify cost-optimization opportunities via rightsizing and storage tiering.

Skills

Cloud architecture

IAM & security

IaC & automation

Terraform

CI/CD pipelines

Python

GitHub Actions

Go

Rust

Cost optimization

Education

BS/MS in Computer Science or related field

Tools

Terraform

CloudFormation

ArgoCD

Flux

GitHub Actions

Istio/Linkerd

Job description

About the Team & Role:

We're building Rubrik Agent Cloud, the enterprise platform to monitor, govern, and remediate AI agents. Our team operates at the intersection of AI, distributed systems, and enterprise security, creating solutions that make it possible for organizations to operate production‑grade AI agents at scale. As a member of the Rubrik Agent Cloud team, you'll work with cutting‑edge AI technologies while solving complex challenges in scaling, security, and performance. We're a collaborative team passionate about pushing the boundaries of what's possible with enterprise AI infrastructure.

What You’ll Do:

• Design and Govern Secure Cloud Foundations: Drive end‑to‑end cloud onboarding process for new business units, applications, and teams across multiple clouds such as AWS, Azure, GCP, and OCI .
• Drive Implementation of secure landing zones, multi‑account/tenant structures, IAM and Policies .
• Enforce tagging standards , resource hierarchy models , and governance frameworks to enable accountability, cost tracking, and lifecycle management.
• Manage and evolve IAM, SSO, Org/Subscription/Project policies, and Role‑Based Access Controls (RBAC) across all clouds.
• Embed Security and Compliance at Scale: Design and implement security controls including encryption, KMS, VPC Service Controls, privileged access management (PIM), and audit logging .
• Proactively address security vulnerabilities , misconfigurations, and compliance gaps in collaboration with the InfoSec teams .
• Lead periodic Compliance Audits, cloud security and producing mitigation and remediation strategies.
• Drive Automation, Efficiency, and Optimization: Collaborate with the team for development of Infrastructure‑as‑Code (IaC) templates and automation pipelines using Terraform , Cloudformation , and CI/CD (Flux, GitHub Actions, ArgoCD etc) to support and manage various aspects of Cloud Operations .
• Continuously identify cost‑optimization opportunities via rightsizing, storage tiering, idle resource elimination, and architecture reviews .

Experience You’ll Need:

You are a passionate and experienced cloud expert who thrives on building scalable, secure, and automated systems. BS/MS in Computer Science or a related field, or equivalent practical experience . 2+ years of CloudOps, Engineering, or Software Architecture experience , with deep expertise in at least one major public cloud ( AWS / GCP ) and familiarity with others ( Azure, OCI, etc ). Expertise in multi‑cloud IAM , Org/Project design, security policies, logging/monitoring, and access controls . Strong skills in automation and Infrastructure‑as‑Code (IaC) using tools like Terraform, Python, and GitHub Actions . Proven experience in cloud financial management and cost optimization strategies. Excellent communication, collaboration, and leadership skills with a clear track record of mentoring other engineers.

Nice to have:

• Knowledge of regulatory compliance frameworks ( SOX, FedRAMP, SOC 2, ISO, HIPAA ).
• Understanding of FedRAMP operational controls; past FedRAMP environment experience is a significant plus.
• Experience working at the intersection of infrastructure and product – a track record of working with product and backend engineers to design and build novel solutions that are not constrained by runtime environment e.g. onprem, customer cloud, neo cloud, or managed cloud.
• Experience proactively solving customer pain points at the infrastructure level (simplifying customer onboarding procedures, redesigning systems to meet customer security requirements).
• Experience with modern performance programming languages such as Go, Rust a plus.
• Deep knowledge of modern cloud infrastructure across clouds via service mesh networking ( Istio/LinkerD, envoy, eBPF a plus).
• Experience building systems meant to be deployed in various external environments, such as customer cloud accounts (On-prem a plus).

US Pay Range

US Pay Range $158,000 - $237,000 USD

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job‑related skills, experience, and relevant education or training.

Join Us in Securing and Accelerating the World's AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real‑time guardrails, fine‑tuning for accuracy and undoing agentic mistakes.

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data. Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest pot