External Post

Menlo Security; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Menlo Security's Platform Infrastructure Engineering team builds and operates the company’s core infrastructure services on a cloud-native platform using Google Kubernetes Engine and multiple regions. As a Platform Infrastructure Engineer, you will design, deploy, and maintain VM and Kubernetes infrastructure across GCP and AWS in development, staging, and production environments.

You will write IaC with Terraform and Spacelift, implement security-first design, observability, and disaster

Qualifications

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience
• Proficiency in Python, Bash, and Go
• Understanding of network topologies and enterprise connectivity
• Kubernetes expertise in production environments
• Proven experience with Terraform for infrastructure provisioning and management
• Knowledge of GCP services (GKE, VPC, Cloud DNS, Artifact Registry, Secret Manager, IAM)
• Familiarity with LLM-based code assist/tools for development

Responsibilities

• Design, deploy, and maintain VM and Kubernetes infrastructure on GCP and AWS across multiple regions
• Build and maintain Infrastructure as Code using Terraform and Spacelift
• Build and maintain observability solutions with Grafana Cloud, Prometheus/Mimir, and OTel collectors
• Manage certificate lifecycle, DNS automation, ingress, and service mesh networking
• Collaborate with Engineering, Product, Compliance, and Security teams on capacity planning and DR decisions
• Elicit automation opportunities and build CI/CD pipelines with AI-assisted coding tools
• Participate in 24x7 on-call rotation and post-incident reviews

Skills

Python

Bash

Go

Kubernetes

Terraform

GCP

LLM tooling

Education

Bachelor's degree in Computer Science or related field

Tools

Spacelift

Grafana Cloud

Prometheus

OTel

Job description

Menlo Security is the leader in Browser Security for human and agentic workforces. Our mission is to enable humans and agents to connect, communicate, and collaborate securely, without compromise. The Menlo Browser Security Platform protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is trusted by major global businesses, including Fortune 500 companies and government agencies, to protect their most valuable asset, their data, and is backed by top-tier investors.

Summary

Platform Infrastructure Engineering builds and operates Menlo Security's Infrastructure Platform, enabling our customers to connect to the Internet without compromise. As a Platform Infrastructure Engineer, you'll join a globally distributed team of experienced engineers building and managing the company's core infrastructure services on a cloud-native platform built on Google Kubernetes Engine and VMs spanning multiple regions and environments. The team manages infrastructure as code with Terraform and Spacelift, deploys with Helm, and emphasizes security-first design, comprehensive observability, and multi-region resilience. The team also uses AI-assisted development and code-review tools, including Gemini Code Assist, as part of the standard engineering workflow, and this role is expected to use LLM-based tooling to build and troubleshoot infrastructure code efficiently.

Outcomes & KPIs

Key Outcome(s) Owned:

• Reliable, secure, and scalable infrastructure across GCP and AWS supporting Menlo's platform globally.

• Reduced operational toil and incident recurrence through automation and Infrastructure as Code practices.

• Comprehensive, end-to-end observability framework providing deep platform visibility, proactive health monitoring, and accelerated incident detection and resolution.

Success Metrics / KPIs:

• Infrastructure uptime/availability across regions (e.g., 99.9%+)

• Mean time to detect (MTTD) and mean time to resolve (MTTR) for incidents

• Percentage of infrastructure changes deployed via IaC (Terraform) vs. manual changes

• On-call incident volume and reduction in repeat/preventable incidents

• Lead time for provisioning new infrastructure

What You'll Do

• Design, deploy, and maintain VM and Kubernetes infrastructure on GCP and AWS across dozens of clusters spanning development, staging, and production environments in multiple regions

• Build and maintain Infrastructure as Code using Terraform modules and Spacelift (or equivalent TACOS), provisioning networking, compute, storage, and security components, and implementing multi-layer configuration management workflows

• Build and maintain observability solutions using Grafana Cloud, Prometheus/Mimir, and OTel collectors, designing dashboards and alerting rules across all platform components

• Manage certificate lifecycle, DNS automation, ingress controllers, and service mesh networking with Cilium

• Partner with peers and across Engineering, Product, Compliance, and Security teams to align on requirements and consult on capacity planning, disaster recovery, and architectural decisions

• Identify and eliminate toil through automation — writing scripts, building CI/CD pipelines, and using AI-assisted coding tools to move faster

• Participate in a 24x7 on-call rotation as part of a globally distributed team, responding to incidents and driving post-incident reviews

Functional Competencies

Required:

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience

• Proficiency in common programming and scripting languages, particularly Python, Bash, and Go

• Understanding of network topologies, communication protocols (e.g., TCP/IP, HTTP/S, UDP, TLS), and enterprise-grade connectivity solutions

• Kubernetes expertise, including cluster administration, RBAC, networking, workload management, and troubleshooting in production environments

• Proven experience with Terraform for infrastructure provisioning and management

• Knowledge of Google Cloud Platform services including GKE, VPC networking, Cloud DNS, Artifact Registry, Secret Manager, IAM, Gemini Code Assist, and Workload Identity

• Clear understanding of how to use LLM-based code-assist tools to effectively build and troubleshoot software

Preferred / Nice to Have:

• Experience with GitOps methodologies and tools

MSGL-I4

Follow us on LinkedIn!

Why Menlo?

At Menlo, we don't settle for the status quo — in our technology or our culture. How we think and act is just as important as what we build. Our culture is defined by five core mindsets: Proactive Leadership, Straight Talk, United Impact, Elevated Talent, and Customer-Compelled. We take ownership and drive outcomes without waiting to be told. We communicate directly and seek hard truths. We break down silos and win together. We hold a high bar for ourselves and the people around us. And we treat every customer interaction as mission-critical. If you're someone who sees it, owns it, solves it, and does it — you'll thrive here.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

TO ALL AGENCIES: Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Ashby (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. Any resume submitted outside of this process will be deemed the sole property of Menlo Security. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.