Principal Platform Infrastructure Engineer, Menlo Security
Site Reliability Engineering Enablement
Cloud-based security platform
Be an early applicant
Cloud-based security platform
201-500 employees
Be an early applicant
201-500 employees
Company mission
To help businesses and organizations achieve full online productivity to achieve their goals by pre-emptively eliminating cyber attacks.
Role
Who you are
- Bachelor's degree in Computer Science, similar technical field of study, or equivalent practical experience
- Proficiency in common programming & scripting languages. We use a lot of python, bash and go
- Understanding of network topologies, communication protocols (ie. TCP/IP, HTTP/S, UDP, TLS) and enterprise grade connectivity solutions
- Kubernetes expertise including cluster administration, RBAC, networking, workload management, and troubleshooting across production environments
- Proven experience with Terraform for infrastructure provisioning and management
- Knowledge of Google Cloud Platform services including GKE, VPC networking, Cloud DNS, Artifact Registry, Secret Manager, IAM, Gemini Code Assist, and Workload Identity
- Prior experience and success mentoring other junior and senior engineers
- Experience with GitOps methodologies and tools
- Clear understanding of how to use LLM code assist tools to effectively build software
What the job involves
- Platform Infrastructure Engineering is responsible for building and operating Menlo Security's Infrastructure Platform
- Our environment provides services globally. We expect failure, build security in by design, create evolvable systems, and enable multi-tenancy across the infrastructure. Automation is an absolute for us
- The team operates a sophisticated cloud-native infrastructure built on Google Kubernetes Engine and VMs spanning multiple environments globally from development to production. We manage infrastructure as code with Terraform and Spacelift orchestration, and deploy services using Helm charts
- Our platform emphasizes security-first design, comprehensive observability, and multi-region resilience. Success in this role requires working with a vast VM fleet in AWS and GCP as well as Kubernetes, writing Infrastructure as Code, and a passion for automation and reliability engineering
- Architect and govern the design, deployment, and operation of high-scale, multi-region VM and Kubernetes infrastructure on GCP and AWS, ensuring maximum resilience and performance across all environments
- Drive cross-functional technical alignment with Engineering, Product, Compliance, and Security teams, serving as the architectural consultant and leader for major initiatives involving capacity planning, disaster recovery, and cloud-native application design
- Define and enforce organizational best practices and standards for Infrastructure as Code (IaC) using Terraform and Spacelift, ensuring consistency and security across all provisioned cloud resources (GCP/AWS)
- Design and manage complex, multi-layer configuration management and deployment workflows that optimize reliability and operational efficiency across the entire platform
- Set the technical direction and implement comprehensive observability solutions (Grafana Cloud, Prometheus/Mimir, OTel collectors), establishing organization-wide standards for system visibility, metrics, and alerting
- Define the strategic architecture and lifecycle management of core platform services, including certificate management, DNS automation, ingress controllers, and service mesh networking (Cilium)
- Proactively identify and lead large-scale strategic efforts to eliminate technical toil and improve operational efficiency through the development of tools, strategic automation, and building advanced CI/CD pipelines
- Mentor and provide deep technical guidance to both junior and senior engineers within Platform Infrastructure Engineering
- Participate in a 24x7 on-call rotation as part of a globally distributed team, responding to incidents and driving post-incident reviews to ensure long-term solutions and process i
Our take
Menlo Security takes a “zero trust” approach to computer threats by isolating all of a business’s web browsing and putting it on a remote server. Instead of depending upon software to scan and search for threats, it prevents attacks from ever reaching the system. Browsing activity no longer takes place on the end user’s device, instead, it all happens on a remote cloud service which is operated by the company. This service is the largest secure web gateway in the world.
Menlo Security has focused on protecting businesses from web and email attacks, and its model means that it can be integrated with most popular browsers. A particularly appealing aspect of its service is that it doesn’t require businesses to install new software or change their approach, drastically reducing friction for users and making onboarding a far simpler experience.
Currently used by 8 out of 10 of the world's largest banks and capable of completely stopping up to 90% of threats, Menlo Security is in a strong position. It is still continuing to develop its services, however, most recently building out a range of AI-powered tools to detect and prevent phishing and ransomware attacks. Moves like this seem likely to help keep Menlo Security at the forefront of its sector.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Nov 2020
$100m
SERIES E
Jul 2019
$75m
SERIES D
Total funding: $260.5m
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Amir Ben-Efraim
(Co-Founder & CEO)Having studied at UCB, Stanford, and UCLA, they worked in Business Development at Check Point Software before founding Blue Wireless in 1999. They continued to work in Security Software, before co-founding Menlo Security in 2013.
Share this job
View 17 more jobs at Menlo Security