Platform Infrastructure Engineer, Menlo Security
Containers
+ Equity
Cloud-based security platform
Open for applications
Cloud-based security platform
201-500 employees
Open for applications
+ Equity
201-500 employees
Company mission
To help businesses and organizations achieve full online productivity to achieve their goals by pre-emptively eliminating cyber attacks.
Role
Who you are
- Success in this role requires deep Kubernetes expertise, strong Infrastructure as Code skills, experience with cloud platforms (primarily GCP), and a passion for automation and reliability engineering
- Bachelor's degree in Computer Science, similar technical field of study, or equivalent practical experience
- Experience operating Kubernetes-based platform in production environments
- Experience with Google Kubernetes Engine (GKE) on Autopilot and Standard modes, Workload Identity, and GKE Fleet management, or similar experience with other Cloud Service Providers
- Strong Kubernetes expertise including cluster administration, RBAC, networking, workload management, and troubleshooting across production environments
- Proven experience with Terraform for infrastructure provisioning and management
- Proficiency with Helm for packaging and deploying Kubernetes applications. Experience developing and maintaining Helm charts, managing chart repositories, and complex values configurations
- Knowledge of Google Cloud Platform services including GKE, VPC networking, Cloud DNS, Artifact Registry, Secret Manager, IAM, and Workload Identity
- Experience with GitOps methodologies and tools, particularly Flux CD. Understanding of Kustomize, HelmRelease patterns, dependency management, and multi-environment configuration strategies
What the job involves
- As a Platform Infrastructure Engineer, you'll join a group of experienced engineers located in the North America region who are part of a globally distributed team responsible for managing the company's core infrastructure services and maintaining our constantly growing platform
- The team operates a sophisticated cloud-native infrastructure built on Google Kubernetes Engine (GKE) with 15+ clusters spanning multiple environments from development to production
- We leverage GitOps practices with Flux CD, manage infrastructure as code with Terraform and Spacelift orchestration, and deploy services using Helm charts
- Our platform emphasizes security-first design with OPA/Gatekeeper policy enforcement, comprehensive observability with Grafana Cloud, and multi-region resilience
- Design, deploy, and maintain Kubernetes infrastructure on Google Kubernetes Engine (GKE) across dozens of clusters spanning development, staging, and production environments in multiple regions
- Build and maintain Infrastructure as Code (IaC) using Terraform modules, managing resources through Spacelift or equivalent Terraform Automation and Collaboration Software (TACOS). Provision cloud infrastructure including networking, compute, storage, and security components primarily on GCP, with secondary AWS support
- Implement and manage GitOps workflows with sophisticated multi-layer configuration management using Flux CD. Deploy and maintain applications using Helm charts, managing dependencies, versioning, and phased rollouts across environments
- Develop and enforce security policies using OPA/Gatekeeper to meet compliance frameworks. Manage secrets, configure Workload Identity, and implement network policies
- Build and maintain comprehensive observability solutions using Grafana Cloud, Prometheus/Mimir, and Alloy collectors. Design Grafana dashboards, configure alerting rules, and ensure visibility across all platform components
- Manage certificate lifecycle, DNS automation, ingress controllers, and service mesh networking with Cilium
- Partner with Engineering, Product, Compliance, and Security teams to design resilient, scalable systems. Consult on capacity planning, disaster recovery, and architectural decisions for cloud-native applications
- Identify and eliminate toil through automation. Write scripts, develop tools, and build CI/CD pipelines to improve operational efficiency and reduce manual work
- Participate in a 24x7 on-call rotation as part of a globally distributed team, responding to incidents and driving post-incident reviews
Our take
Menlo Security takes a “zero trust” approach to computer threats by isolating all of a business’s web browsing and putting it on a remote server. Instead of depending upon software to scan and search for threats, it prevents attacks from ever reaching the system. Browsing activity no longer takes place on the end user’s device, instead, it all happens on a remote cloud service which is operated by the company. This service is the largest secure web gateway in the world.
Menlo Security has focused on protecting businesses from web and email attacks, and its model means that it can be integrated with most popular browsers. A particularly appealing aspect of its service is that it doesn’t require businesses to install new software or change their approach, drastically reducing friction for users and making onboarding a far simpler experience.
Currently used by 8 out of 10 of the world's largest banks and capable of completely stopping up to 90% of threats, Menlo Security is in a strong position. It is still continuing to develop its services, however, most recently building out a range of AI-powered tools to detect and prevent phishing and ransomware attacks. Moves like this seem likely to help keep Menlo Security at the forefront of its sector.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Nov 2020
$100m
SERIES E
Jul 2019
$75m
SERIES D
Total funding: $260.5m
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Amir Ben-Efraim
(Co-Founder & CEO)Having studied at UCB, Stanford, and UCLA, they worked in Business Development at Check Point Software before founding Blue Wireless in 1999. They continued to work in Security Software, before co-founding Menlo Security in 2013.
Share this job
View 8 more jobs at Menlo Security