Multicloud InfraSec Engineer: Guardrails, CSPM & Scale

The Briefed; Austin (TX); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Equity & ESPP

Flexible PTO

Parental leave

Fertility assistance

401(k)

Mental health benefits

Health insurance

Job summary

MongoDB's InfraSec team, part of Site Reliability Engineering, protects Atlas across AWS, Azure, and Google Cloud with automated guardrails and secure IaC workflows.

The role focuses on hardening Linux hosts and containers, building CSPM and workload identity controls, and writing production-grade code with Terraform to deploy security controls as code. You will lead initiatives from threat modeling to rollout and ensure platform-wide reliability.

Qualifications

• 5+ years in SRE, infrastructure engineering, or cloud security engineering.
• Strong coding skills in Go, Python, C, C++, or Rust.
• Proven track record building and operating large-scale distributed systems or cloud platform infra.
• Hands-on experience with Terraform, CloudFormation, or Ansible for automated provisioning.
• Experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure).
• Education: Not specified.

Responsibilities

• Harden hosts and containerized workloads using Linux security mechanisms and eBPF-based tooling.
• Secure containerized infrastructure across multi-cloud environments with RBAC, network policies, and admission controls.
• Build and manage automated CSPM, workload identity, vulnerability management, and access controls.
• Write production-quality code and use Terraform to version, test, and deploy security controls as code.
• Build real-time security monitoring, logging, and alerting systems at Atlas scale.
• Lead initiatives from threat modeling and architectural design to production rollout.

Skills

Go

Python

C

C++

Rust

Tools

Terraform

CloudFormation

Ansible

Job description

MongoDB's InfraSec team, part of Site Reliability Engineering, protects Atlas across AWS, Azure, and Google Cloud with automated guardrails and secure IaC workflows.

The role focuses on hardening Linux hosts and containers, building CSPM and workload identity controls, and writing production-grade code with Terraform to deploy security controls as code. You will lead initiatives from threat modeling to rollout and ensure platform-wide reliability.