Staff Software Engineer, Enterprise Platform

What You'll Do

• Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires.
• Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures.
• Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems.
• Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data.
• Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across regions and configurations.
• Debug and harden systems: Dive deep into complex infrastructure problems spanning networking, authorization, Kubernetes, and cloud services to make our enterprise platform more robust and diagnosable.
• Partner with go-to-market teams: Collaborate with Sales and Customer Success to understand enterprise infrastructure requirements, scope technical solutions, and unblock deployments.
• Contribute to technical strategy: Help define SLAs/SLOs for enterprise infrastructure reliability; participate in build-vs-buy decisions for complex infrastructure capabilities.

Required Skills and Experience

• 7+ years of experience in Infrastructure Engineering, Platform Engineering, or similar roles.
• Strong programming skills in Go, Typescript or Python; you write high-quality, well-tested code.
• Experience with Kubernetes and cloud-native technologies in production environments.
• Solid understanding of cloud networking: VPCs, peering, private connectivity, load balancers, DNS.
• Experience with infrastructure as code (Terraform) and configuration management.
• Familiarity with authentication and authorization systems: OAuth/OIDC, RBAC/ABAC models, policy enforcement.
• Familiarity with security and encryption fundamentals: TLS, encryption at rest, key management concepts.
• Strong debugging skills with an ability to trace issues across distributed systems.
• Excellent written communication; you can explain technical tradeoffs clearly to both engineers and non-technical stakeholders.

Nice to Have

• Experience with Google Cloud Platform (GCP) services, networking, and IAM.
• Experience building multi-tenant or single-tenant SaaS infrastructure.
• Familiarity with enterprise compliance frameworks (SOC 2, FedRAMP, HIPAA) and how they translate to infrastructure requirements.
• Experience with customer-managed encryption keys (CMEK/BYOK) implementations.
• Background in developer platforms, cloud IDEs, or developer productivity products.