Replit
Staff
Build Replit's enterprise infrastructure — single-tenant deploys, private networking, BYOK, authZ
Replit is hiring a Staff Software Engineer for its Enterprise Platform team to build the infrastructure that lets large organizations run Replit within their own security and compliance boundaries: single-tenant deployments, VPC peering and private connectivity, custom authorization/policy enforcement, and customer-managed encryption (BYOK). With 7+ years of infrastructure/platform engineering expected, this interview digs into concrete cloud-networking, Kubernetes, and authZ system design plus the judgment to work directly with Sales/Security on enterprise deals.
Step into this interview
Free · a live voice mock calibrated to this exact role
What this interview tests
- Single-tenant / dedicated deployment architecture
- Cloud networking: VPC peering, private connectivity, DNS
- Authorization systems: RBAC/ABAC, policy enforcement, OAuth/OIDC
- Customer-managed encryption (BYOK/CMEK) and data residency
- Infrastructure as code (Terraform) for enterprise deploys
- Kubernetes production debugging and hardening
Common question themes
Design a private connectivity solution for an enterprise customer that disallows public internet egress
How would you build a policy-enforcement/authorization layer that supports custom RBAC/ABAC per enterprise tenant
Walk me through implementing bring-your-own-key encryption and how it changes your system's threat model
Describe a Terraform module you wrote for repeatable multi-region infrastructure deployment
Tell me about debugging a complex distributed-systems issue spanning networking and Kubernetes
Describe a time you translated a vague enterprise security requirement, working with Sales, into a concrete technical solution