Senior Software Engineer (SRE), Infrastructure Security

MongoDB•Austin, NY

2d•Hybrid

About The Position

The Infrastructure Security (InfraSec) team, part of Site Reliability Engineering (SRE) within the CTO organization, is responsible for building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). The team operates with a preventative, enabling model, focusing on developing automated guardrails and platform capabilities rather than manual approvals or audits. They integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows to enable engineering teams to operate securely at scale without friction. This role can be based out of the New York City office or remotely in the eastern or central timezone.

Requirements

5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
Strong coding skills in Go (Golang), Python, C, C++, or Rust.
Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Nice To Haves

Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
Direct ownership of Cloud Security and Workload Identity platforms
Multi-cloud expertise spanning AWS, Azure, and GCP
Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

Responsibilities

Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability