Remote-First Enterprise Cloud Platform Engineer

Replit; United States; On-site; USD 140,000 - 195,000; Full time

Benefits offered by this job

Remote-First working environment

Flexible Work Hours

Health, Dental, Vision, and Life

Job summary

Replit is seeking an Infrastructure Engineer for the Enterprise Platform team to design and implement deployment and networking capabilities for large organizations. You will work on single-tenant and private connectivity options, authorization systems, and data controls to meet enterprise security requirements.

You will collaborate with Platform Engineering, Security, and Sales to ship scalable, compliant infrastructure across regions, focusing on CMEK/BYOK, IAM, and multi-tenant SaaS

Qualifications

• Strong programming skills in Go, Typescript or Python; write high-quality, well-tested code.
• Cloud networking knowledge: VPCs, peering, private connectivity, load balancers, DNS.
• Experience with Kubernetes and cloud-native technologies in production.
• Familiarity with security concepts: TLS, encryption at rest, key management.
• Strong debugging skills across distributed systems.
• Experience with Terraform and IaC.
• Familiarity with OAuth/OIDC, RBAC/ABAC models and policy enforcement.
• Excellent written communication for technical trade-offs.
• 4+ years in Infrastructure/Platform engineering.
• Experience with GCP services, networking, and IAM.
• Experience building multi-tenant or single-tenant SaaS infrastructure.
• Familiarity with SOC 2, FedRAMP, HIPAA.
• Background in developer platforms, cloud IDEs, or developer productivity.
• Experience with CMEK/BYOK implementations.

Responsibilities

• Join our Enterprise Platform team and build the infrastructure foundations that enable the world’s largest organizations to run Replit within their security and compliance boundaries
• As a Software Engineer on this team, you’ll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption
• You’ll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations
• Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires
• Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures
• Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers’ existing identity and governance systems
• Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data
• Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across regions and configurations
• Debug and harden systems: Dive deep into complex infrastructure problems spanning networking, authorization, Kubernetes, and cloud services to make our enterprise platform more robust and diagnosable
• Partner with go-to-market teams: Collaborate with Sales and Customer Success to understand enterprise infrastructure requirements, scope technical solutions, and unblock deployments
• Contribute to technical strategy: Help define SLAs/SLOs for enterprise infrastructure reliability; participate in build‑vs‑buy decisions for complex infrastructure capabilities

Skills

Go

Typescript

Python

Kubernetes

Terraform

OAuth/OIDC

RBAC/ABAC

TLS / encryption

Cloud networking

Debugging distributed systems

Security fundamentals

GCP IAM

SaaS multi-tenant infra

CMEK/BYOK

Tools

Kubernetes

Terraform

GCP

Job description

Replit is seeking an Infrastructure Engineer for the Enterprise Platform team to design and implement deployment and networking capabilities for large organizations. You will work on single-tenant and private connectivity options, authorization systems, and data controls to meet enterprise security requirements.

You will collaborate with Platform Engineering, Security, and Sales to ship scalable, compliant infrastructure across regions, focusing on CMEK/BYOK, IAM, and multi-tenant SaaS