Staff Site Reliability Engineer, Infrastructure Security

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction.

This role can be based out of our office or remotely in the United States.

What You’ll Do

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)

• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection

• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP

• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code

• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale

• Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What We’re Looking For

Minimum Qualifications:

• 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering

• A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery

• Strong coding skills in Go (Golang), Python, C, C++, or Rust

• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure

• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning

• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Preferred Qualifications:

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)

• Direct ownership of Cloud Security and Workload Identity platforms

• Multi-cloud expertise spanning AWS, Azure, and GCP

• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)