Staff Software Engineer, Enterprise Platform

Designs and implements enterprise-grade infrastructure including single-tenant deployments, private networking, authorization systems, and data protection features for large organizations using Replit. Requires 7+ years in platform engineering with expertise in Go/TypeScript/Python, Kubernetes, Terraform, and cloud networking.

About the job

What You'll Do

Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires.
Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures.
Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems.
Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data.
Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across regions and configurations.
Debug and harden systems: Dive deep into complex infrastructure problems spanning networking, authorization, Kubernetes, and cloud services to make our enterprise platform more robust and diagnosable.
Partner with go-to-market teams: Collaborate with Sales and Customer Success to understand enterprise infrastructure requirements, scope technical solutions, and unblock deployments.
Contribute to technical strategy: Help define SLAs/SLOs for enterprise infrastructure reliability; participate in build-vs-buy decisions for complex infrastructure capabilities.

Required Skills and Experience

7+ years of experience in Infrastructure Engineering, Platform Engineering, or similar roles.
Strong programming skills in Go, Typescript or Python; you write high-quality, well-tested code.
Experience with Kubernetes and cloud-native technologies in production environments.
Solid understanding of cloud networking: VPCs, peering, private connectivity, load balancers, DNS.
Experience with infrastructure as code (Terraform) and configuration management.
Familiarity with authentication and authorization systems: OAuth/OIDC, RBAC/ABAC models, policy enforcement.
Familiarity with security and encryption fundamentals: TLS, encryption at rest, key management concepts.
Strong debugging skills with an ability to trace issues across distributed systems.
Excellent written communication; you can explain technical tradeoffs clearly to both engineers and non-technical stakeholders.

Nice to Have

Experience with Google Cloud Platform (GCP) services, networking, and IAM.
Experience building multi-tenant or single-tenant SaaS infrastructure.
Familiarity with enterprise compliance frameworks (SOC 2, FedRAMP, HIPAA) and how they translate to infrastructure requirements.
Experience with customer-managed encryption keys (CMEK/BYOK) implementations.
Background in developer platforms, cloud IDEs, or developer productivity products.