The opportunity
InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code…
What you'll do
Harden hosts and containerized workloads using Linux security mechanisms: (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC,: network policies, admission controls (Gatekeeper), and runtime threat detection
Build and manage automated services for Cloud Security Posture Management: (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform): to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect: anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and: architectural design to implementation, rollout, and long-term production reliability
What they're looking for
- + years in SRE, Infrastructure Engineering, or Cloud Security Engineering
- A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery
- Strong coding skills in Go (Golang), Python, C, C++, or Rust
- Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure
- Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
- Demonstrated experience owning infrastructure in Linux, Kubernetes, and at: least one major cloud provider (AWS, GCP, or Azure)
- Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
- Direct ownership of Cloud Security and Workload Identity platforms