Senior Platform Engineer

About the role

Mondoo is creating a new way that helps companies keep their users and data safe from hackers around the world. We believe that a great user experience and visual design will help our users to love and enjoy our product and make it easier to take action against attackers.

Your impact

You will have a direct impact on the Mondoo Platform including our policy engine, resources, scale, and multi-region functionality. You will be helping teams to assess, scope, prioritize, triage and remediate security findings.

Key responsibilities

We're seeking a talented Platform Engineer who is eager to enhance their expertise in security. This position offers the opportunity to work with cutting-edge technologies and gain hands-on experience in "policy as code" frameworks while contributing to our dynamic team.

In this role, you will:

- Build, manage, and optimize cloud infrastructure using Infrastructure as Code (IaC) tools like Terraform and CloudFormation.

- Automate system configurations using tools like Ansible, Puppet, or Chef.

- Collaborate with teams to ensure seamless integration of infrastructure with CI/CD pipelines.

- Assist in translating high-level security requirements into practical policy as code implementation within cloud and on-premises environments.

- Review vulnerability reports submitted by external users

- Participate in gathering evidence for our audits

- Support the implementation and scaling of automated security controls in Kubernetes, cloud environments (AWS, Azure, GCP), and operating systems.x5

- Stay updated on infrastructure management and automation trends, ensuring a robust and scalable system foundation

Required qualifications

- Strong hands-on experience with IaC tools like Terraform or CloudFormation.

- Proficiency in configuration management tools such as Ansible, Puppet, or Chef.

- Solid understanding of at least one major cloud platform (AWS, Azure, or GCP) and its core services.

- Experience working with container technologies like Docker and orchestration tools like Kubernetes.

- Comfortable scripting in at least one language (e.g., Python, Bash, or similar).

- Knowledge of networking basics (TCP/IP, DNS, etc.).

- Experience with version control systems (e.g., Git).

- Strong problem-solving and analytical skills.

- Willingness to learn and grow into a role focused on security policies and automation.

- Excellent communication skills with the ability to work effectively in a collaborative team environment.

- Able to handle one-off requests while still maintaining the rest of the work

Preferred qualifications

- Familiarity with security tools and concepts such as policy as code frameworks (Open Policy Agent, Sentinel).

- Knowledge of compliance standards (e.g., CIS, SOC 2, ISO 27001).