Senior Software Engineer - Backend & Cloud Infrastructure

Gohyred; Palo Alto (CA); On-site; USD 189,000 - 283,000; Full time

Job summary

Rubrik is building the Agent Cloud to monitor, govern, and remediate AI agents across clouds. You will architect secure, scalable foundations (RBAC/ABAC, IAM) and lead cross-functional efforts from design to deployment.

You will implement IaC with Terraform/CloudFormation/Pulumi, develop CI/CD pipelines with GitHub Actions and Flux/ArgoCD, and drive zero-trust networking using Istio/Envoy and eBPF for deep observability and compliance.

Qualifications

• 7+ years of progressive experience in Cloud Engineering, Systems Architecture, or SRE.
• Expert-level proficiency in Infrastructure-as-Code (Terraform) and at least one programming language (Python or Go).
• Deep expertise in Multi-Cloud IAM, Network Virtualization, and Cloud Security governance.
• Proven experience with Container Orchestration (Kubernetes) and modern observability/networking stacks (Service Mesh, eBPF).
• Experience with regulated environments (FedRAMP, SOC2).

Responsibilities

• Architect secure multi-cloud foundations and onboarding across AWS, Azure, GCP, OCI.
• Engineer security controls including KMS, encryption, and perimeters with VPC Service Controls and PIM.
• Develop and govern RBAC/ABAC models and metadata-driven lifecycle management.
• Design IaC templates with Terraform, CloudFormation, and Pulumi for deterministic provisioning.
• Build and maintain CI/CD pipelines with GitHub Actions, FluxCD, and ArgoCD (GitOps).
• Create automation tooling in Python/Go/Rust to bridge services and Rubrik Agent Cloud.
• Lead zero-trust networking with Istio/Envoy and eBPF for observability.
• Mentor engineers; collaborate with Backend/AI teams; ensure FedRAMP/SOC2 compliance.

Skills

Cloud engineering

Systems architecture

Site Reliability Engineering

Terraform

Python

Go

Kubernetes

IAM

RBAC

ABAC

Service Mesh

eBPF

GitOps

CI/CD

Terraform CloudFormation Pulumi

KMS

FedRAMP

SOC2

Education

Bachelor’s degree in CS/CE/IS

Master’s degree preferred

Tools

Terraform

CloudFormation

Pulumi

GitHub Actions

FluxCD

ArgoCD

Python

Go

Rust

Istio/Envoy

eBPF

Job description

About the Team & Role:

We're building Rubrik Agent Cloud, the enterprise platform to monitor, govern, and remediate AI agents. Our team operates at the intersection of AI, distributed systems, and enterprise security, creating solutions that make it possible for organizations to operate production-grade AI agents at scale.

As a member of the Rubrik Agent Cloud team, you'll work with cutting-edge AI technologies while solving complex challenges in scaling, security, and performance. We're a collaborative team passionate about pushing the boundaries of what's possible with enterprise AI infrastructure.

Nature of the Specialized Duties

Architecting and Governing Secure Multi-Cloud Foundations (30% of time)

• Leading the end-to-end architectural design and onboarding of complex business units into a multi-cloud ecosystem (AWS, Azure, GCP, OCI), ensuring structural parity across disparate environments.
• Engineering secure "Landing Zones" and multi-tenant structures using advanced Identity and Access Management (IAM) hierarchies and automated policy enforcement.
• Developing and implementing global Role-Based Access Control (RBAC) models and Attribute-Based Access Control (ABAC) frameworks to manage granular permissions for AI agent workloads.
• Designing and governing resource hierarchy models and tagging standards that utilize metadata for automated lifecycle management and complex cost-attribution algorithms.

Engineering Security and Compliance at Scale for AI Workloads (25% of time)

• Designing and implementing cryptographic controls, including Key Management Service (KMS) integration, encryption-at-rest/transit protocols, and hardware security module (HSM) configurations.
• Architecting network security perimeters using VPC Service Controls, Privileged Identity Management (PIM), and deep packet inspection logging.
• Conducting technical root-cause analysis of security vulnerabilities and engineering automated remediation scripts to close compliance gaps (SOC 2, ISO 27001, FedRAMP).
• Designing "Zero Trust" networking architectures utilizing Service Mesh (Istio/Envoy) and eBPF for deep observability into AI agent inter-process communication.

Developing Infrastructure-as-Code (IaC) and Automation Pipelines (20% of time)

• Authoring complex, reusable Infrastructure-as-Code (IaC) templates using Terraform, CloudFormation, and Pulumi to ensure deterministic environment provisioning.
• Building and managing sophisticated CI/CD pipelines using GitHub Actions, FluxCD, or ArgoCD to implement GitOps workflows for infrastructure state management.
• Developing custom automation tooling in Python, Go, or Rust to bridge gaps between cloud-native services and Rubrik’s proprietary Agent Cloud platform.
• Engineering automated "drift detection" systems to ensure production environments remain in sync with version-controlled architecture definitions.

Cloud Financial Engineering and Performance Optimization (15% of time)

• Designing and implementing automated cost-optimization engines that leverage machine learning to perform resource rightsizing, storage tiering, and idle resource elimination.
• Conducting deep-dive architecture reviews to identify performance bottlenecks at the infrastructure layer, optimizing for low-latency AI inference and data throughput.
• Modeling cloud consumption patterns to forecast infrastructure scaling requirements and engineering auto-scaling logic based on real-time telemetry.

Technical Leadership and Cross-Functional Systems Integration (10% of time)

• Leading collaboration with Backend Engineers and AI Researchers to design "environment-agnostic" solutions that function across on-prem, customer-managed cloud, and sovereign cloud environments.
• Mentoring junior and mid-level engineers on complex systems design, cloud-native patterns, and advanced troubleshooting of distributed networking issues.
• Redesigning core infrastructure components to simplify customer onboarding while strictly adhering to external security requirements (e.g., FedRAMP operational controls).

Minimum Requirements for the Position

• Education: A Bachelor’s degree (or higher) in Computer Science, Computer Engineering, Information Systems, or a closely related technical field. A Master’s degree is preferred given the seniority and the requirement for advanced knowledge in distributed systems and cloud security.
• Specialized Experience:
• 7+ years of progressive experience in Cloud Engineering, Systems Architecture, or Site Reliability Engineering (SRE).
• Expert-level proficiency in Infrastructure-as-Code (Terraform) and at least one high-level programming language (Python or Go).
• Deep technical expertise in Multi-Cloud IAM, Network Virtualization, and Cloud Security governance.
• Proven experience with Container Orchestration (Kubernetes) and modern observability/networking stacks (Service Mesh, eBPF).
• Demonstrated ability to engineer solutions for highly regulated environments (FedRAMP, SOC2).

US Pay Range

$188,500—$282,700 USD

Join Us in Securing and Accelerating the World's AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes.

Linkedin | X (formerly Twitter) | Instagram |Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

• Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

• Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

• Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.

Rubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact [e-mail]. Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS