Cloud & Infrastructure Engineer

MX is seeking a Cloud & Infrastructure Engineer to join the new Enterprise Engineering team. Enterprise Engineering builds the paved road for how MX builds: self-serve tooling, shared standards, and guardrails that let any MXer go from an idea to a governed internal app, automation, or agent quickly and safely.

You'll own the foundation that road runs on: the Enterprise GCP Environment, the network and connectivity behind it, the identity and security controls that keep it safe, and the reliability practices that keep it running. You'll also partner with IT Operations to maintain inter-app integrations and MX's office networks. 

You'll partner closely with the team's Senior Enterprise Engineer, who builds the pipeline, registries, and integrations on top of your platform, and you'll work under Cloud Infrastructure's controls so the platform uses the same control spine as Engineering, scaled to risk.

Job Duties:

GCP Platform & Runtime

• Build and operate the Enterprise GCP Environment with a predictable, automated CI/CD path to production, working under Cloud Infrastructure's controls and oversight (dotted line).
• Own and maintain the curated GCP role catalog and org policy guardrails that make the compliant path the easy path.
• Manage the platform as infrastructure-as-code (Terraform), including self-serve, disposable dev environments that builders can spin up safely.
• Support the migration of the team's existing sharing and registry tools into the Enterprise GCP Environment as its first tenants, working alongside the Senior Enterprise Engineer.

Network & Connectivity

• Design and operate the platform's network architecture: VPCs, network zones, private service connectivity, load balancing, DNS automation, and egress and data-exfiltration controls.
• Partner with IT Operations to maintain MX's office networks, including firewalls, VPN or zero-trust network access, and secure connectivity between office networks and cloud environments, with Information Security on controls.
• Partner with IT Operations to maintain inter-app integrations between MX's enterprise systems and the Enterprise GCP Environment, including the network, identity, and connectivity they depend on.
• Maintain current network diagrams, standards, and change records, and lead network changes through MX's change management process.

Identity & Security Controls

• Implement and maintain identity and auth patterns (Okta/IAP) for the platform's runtime and self-serve dev environments, including service account and workload identity hygiene and least-privilege access.
• Integrate code and agent scanning (e.g., Snyk) into the CI/CD pipeline with the Senior Enterprise Engineer, and keep it current as threats and tooling evolve.
• Partner with Security and Compliance on SOC 2 / PCI audit evidence for the platform's and network's controls.

Reliability, Operations & Cost

• Establish and run reliability practices for the platform and the AI workloads on it: monitoring, alerting, runbooks, incident response, and post-incident reviews.
• Coordinate escalation and after-hours coverage with Cloud Infrastructure for business-critical workloads.
• Implement app support tiers and ownership metadata so tools that become business-critical can graduate to a real owner with a real SDLC.
• Own cost attribution, tagging, and budget alerts for the platform, and support vendor and budget governance for cloud and AI/inference spend.

Cross-Functional Partnership

• Partner closely with Cloud Infrastructure to operate under its controls and oversight rather than around them.
• Partner with IT Operations on shared infrastructure, office networks, and inter-app integrations, with clear ownership and escalation between the teams.
• Partner with the Senior Enterprise Engineer and system owners to make sure the platform's guardrails work for real builders, not just on paper.
• Maintain architecture diagrams, runbooks, and documentation for the platform and network the team owns.

Basic Requirements

• Education: Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent practical experience.
• Experience: 6-8+ years in cloud, network, or infrastructure engineering, with production experience on GCP (or AWS/Azure with strong GCP aptitude and willingness to ramp quickly).
• Technical Proficiency:
  • Deep hands-on experience with GCP (IAM, VPC networking, org policy, Cloud Run, GKE, or equivalent compute), or an equivalent hyperscaler with fast GCP ramp-up.
  • Strong network engineering fundamentals: TCP/IP, routing, DNS, load balancing, firewalls, VPN or zero-trust network access, and hybrid cloud connectivity.
  • Infrastructure-as-code (Terraform strongly preferred) and CI/CD for infrastructure (GitLab CI, GitHub Actions, or similar).
  • Identity and auth implementation (Okta, IAP, SSO/SAML/OAuth/OIDC, workload identity).
  • Reliability practices: monitoring, alerting, incident response, and runbooks.
  • Scripting and automation (Python, Bash, or Go).
  • Security fundamentals: least-privilege access, data-exfiltration controls, code and dependency scanning; familiarity with SOC 2 Type II and PCI controls.
• Soft Skills: Strong communication and collaboration skills; comfortable partnering directly with Cloud Infrastructure, Information Security, IT Operations, and builders across the business; documents systems clearly for a mixed-technical audience.

Advanced Requirements

• Cloud or network certifications (e.g., Google Professional Cloud Architect or Professional Cloud Network Engineer) are a plus.
• Experience running platforms for AI workloads (e.g., Vertex AI, inference endpoints, AI gateways) is a plus.
• Please be prepared to walk through a network or platform design you built and the trade-offs you made, and a production incident you resolved.