[Hiring] Staff Site Reliability Engineer, Infrastructure Security @MongoDB

Role Description

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our office or remotely in the United States.

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon).
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP.
• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code.
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale.
• Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability.

Qualifications

• 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering.
• A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery.
• Strong coding skills in Go (Golang), Python, C, C++, or Rust.
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure).

Requirements

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon).
• Direct ownership of Cloud Security and Workload Identity platforms.
• Multi-cloud expertise spanning AWS, Azure, and GCP.
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups).

Benefits

• Equity.
• Participation in the employee stock purchase program.
• Flexible paid time off.
• 20 weeks fully-paid gender-neutral parental leave.
• Fertility and adoption assistance.
• 401(k) plan.
• Mental health counseling.
• Access to transgender-inclusive health insurance coverage.
• Health benefits offerings.