Software Engineer - Platform InfraSec | USA | Remote

This is a remote opportunity, and we would be interested in applicants from USA time zones only at this time. 

The Opportunity:

Grafana Cloud moves millions of metrics, log lines, and traces per second from our customers' environments into a highly available, low-latency stack that processes and stores this data, and serves them to dashboards and alerting tools. We aim to grow this to hundreds of millions per second, and it's critical that as we grow, we improve our performance, increase our reliability, and, of course, do it efficiently and effectively.

The Internal Engineering Platform (IEP) delivered by the Platform group provides application engineers with the tools, systems and Kubernetes clusters they need to build, deploy and run their workloads. Platform roles at Grafana Labs have an eye for engineers with a passion for performance and reliability, and who enjoy taking projects from conception to production. We organize ourselves into squads to allow focus on: cloud infrastructure and capacity management; security; engineering productivity; monitoring and sustainability; and US Federal compliance.

Because we deploy production services, we have on-call rotations to ensure the health of the system. Everyone at Grafana Labs tries to incorporate and use our product line up into their day-to-day, so being on call is an important way to understand our system and how people use our products.

What You'll be Doing:

We’re hiring for our Platform InfraSec squad. This squad owns the automation and decision making around our underlying CSP and compute security features for Grafana Cloud. This includes cloud service provider IAM, Kubernetes RBAC, secret management, and workload security. We’re hands on with writing and shipping code as we aim to simplify secure decision making for engineers by providing pre-configured, secure templates and embedding security best practices into our development tools. We also help the rest of our engineers contributing to Grafana Cloud make the best security decisions possible for all the products we build, through security reviews and advisory.

We invest heavily in developer productivity. You can use modern AI coding assistants as part of your daily workflow (your choice of tools, within security guidelines), backed by a company-funded usage budget so you can iterate quickly without unnecessary friction.

We encourage pragmatic AI-assisted development: faster prototyping, test generation, refactors, documentation, and incident follow-ups—always paired with strong code review and quality standards.

You’ll also have access to frontier models (e.g., GPT-Codex 5/3, Claude Opus 4.6, Gemini 3 Pro). 

What Makes You a Great Fit:

You enjoy working with engineers, as well as with the management structures that are there to support you and enable you and your team to do your very best. 

You are comfortable working in a remote-first company; communication is key. For us, working together means being collaborative, friendly, kind, and respectful. We operate by consensus, you can contribute to a discussion but then commit to the team decision.

As such, being such a highly distributed company, means we would love someone who is keen on working with distributed systems, too.

You are eager to learn and grow. There is a lot of room for growth and development, and the team has quite a lot of knowledge to share for those who are wanting to learn. 

You approach development holistically. The team owns the full life cycle of our code; from writing design docs, to looking at developer feedback, and integration testing. We appreciate engineers who enjoy looking at the big picture, and also notice the details of the brush strokes. The Platform team mainly works with Go, Python, and Shell.

You have experience with operating your code. Since a lot of operators and developers use our software, having some grounding in both of these spaces really helps us with building better platforms for our users.

Bonus Points for:

• Familiarity with CSP IAM and Kubernetes RBAC.
• Proficiency with Infrastructure as Code, particularly with Terraform/Crossplane. We have mixed usage - each has its strengths.
• Experience operating and managing workloads on Kubernetes.
• Experience with cloud security posture management (CSPM).
• You’ve worked in or on open source, or other community-based projects previously. At Grafana Labs, “OSS is in our DNA”.
• Experience with a few CSPs. We run Grafana Cloud on AWS, GCP, and Azure using each’s managed Kubernetes service - EKS, GKE, AKS.
• Familiarity with threat modeling, secure architecture reviews, and security tabletop exercises.
• Enjoys programming in Go. We love building our own tools, utilities, exporters, etc. that suit our needs and otherwise don’t exist (and open sourcing them).

A few of our upcoming projects:

• Strengthening access controls and enhancing developer experience by providing safer defaults.
• Streamlining Just In Time Access through IAM and RBAC change process and automation.
• Improving Cluster and Node level Security Posture and Observability.

Compensation & Rewards

In the United States, the Base compensation range for this role is USD 127,651 - USD 153,180. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process. Benefits include equity, bonus (if applicable) and other benefits listed here.

All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.