Software Engineer

Replit, Inc.
Foster City, CA, United States
11 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Working hours
Regular working hours

Tech stack

User Authentication Software as a Service Cloud Computing Configuration Management Cyber Security Computer Programming Data Control Data Security Software Debugging Distributed Systems Domain Name System (DNS) Identity and Access Management
+22 more
Integrated Development Environments IP Addressing Internet Protocol Python (Programming Language) Key Management Network Architecture OAuth OpenID Peering Role-Based Access Control Cloud Services Software Engineering TypeScript Scripting Transport Layer Security Load Balancing Amazon Virtual Private Cloud (VPC) Containerization Kubernetes Code Testing Data Management Terraform

Job description

Join our Enterprise Platform team and build the infrastructure foundations that enable the world’s largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you’ll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption.

You’ll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations.

What You’ll Do

  • Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires.
  • Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures.
  • Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers’ existing identity and governance systems.
  • Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data.
  • Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across regions and configurations.
  • Debug and harden systems: Dive deep into complex infrastructure problems spanning networking, authorization, Kubernetes, and cloud services to make our enterprise platform more robust and diagnosable.
  • Partner with go-to-market teams: Collaborate with Sales and Customer Success to understand enterprise infrastructure requirements, scope technical solutions, and unblock deployments.
  • Contribute to technical strategy: Help define SLAs/SLOs for enterprise infrastructure reliability; participate in build-vs-buy decisions for complex infrastructure capabilities.

Requirements

  • 7+ years of experience in Infrastructure Engineering, Platform Engineering, or similar roles.
  • Strong programming skills in Go, Typescript or Python; you write high-quality, well-tested code.
  • Experience with Kubernetes and cloud-native technologies in production environments.
  • Solid understanding of cloud networking: VPCs, peering, private connectivity, load balancers, DNS.
  • Experience with infrastructure as code (Terraform) and configuration management.
  • Familiarity with authentication and authorization systems: OAuth/OIDC, RBAC/ABAC models, policy enforcement.
  • Familiarity with security and encryption fundamentals: TLS, encryption at rest, key management concepts.
  • Strong debugging skills with an ability to trace issues across distributed systems.
  • Excellent written communication; you can explain technical tradeoffs clearly to both engineers and non-technical stakeholders.

Nice to Have

  • Experience with Google Cloud Platform (GCP) services, networking, and IAM.
  • Experience building multi-tenant or single-tenant SaaS infrastructure.
  • Familiarity with enterprise compliance frameworks (SOC 2, FedRAMP, HIPAA) and how they translate to infrastructure requirements.
  • Experience with customer-managed encryption keys (CMEK/BYOK) implementations.
  • Background in developer platforms, cloud IDEs, or developer productivity products., Access Control, Adoption, Authentication, Automation, Cloud Computing, Computer Programming, Configuration Management, Cryptography, DNS (Domain Name System), Data Management, Debugging Skills, Distributed Computing, HIPAA (Health Insurance Portability and Accountability Act), IDE (Integrated Development Environment), IP (Internet Protocol), Identify Issues, Information/Data Security (InfoSec), Life Insurance, Load Balancing, Network Architecture/Engineering, OAuth, Production Systems, Python Programming/Scripting Language, SSL-TLS (Secure Socket Layer - Transport Layer Security), Sales, Service Level Agreement (SLA), Software Development, Software Engineering, Technical Strategy, Vision Plan, Writing Skills

Benefits & conditions

This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.

Full-Time Employee Benefits Include:

Competitive Salary & Equity

401(k) Program with a 4% match (US Only)

️ Health, Dental, Vision and Life Insurance

Short Term and Long Term Disability

Paid Parental, Medical, Caregiver Leave

Flexible Time Off (FTO) + Holidays

Commuter Benefits (In-Office Only)

Monthly Wellness Stipend

Autonomous Work Environment

In Office Set-Up Reimbursement (In-Office Only)

Quarterly Team Gatherings

In Office Amenities (In-Office Only)

Want to learn more about what we are up to?

  • Meet the Replit Agent
  • Replit: Make an app for that
  • Replit Blog
  • Amjad TED Talk

Interviewing + Culture at Replit

  • Operating Principles
  • Reasons not to work at Replit

To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerbuilder.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz ¡ WWC Europe 2026

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo ¡ LIVE

5:28 min

Bitcoin scaling and the transition to peer-to-peer transactions

Jad Wahab ¡ LIVE

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo ¡ LIVE

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter ¡ WWC 2024

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz ¡ WWC Europe 2026

Videos

See all

Related articles

See all