Devsecops / Infrastructure Engineer (Kubernetes, Linux & Iso 27001)

Apeirum
Municipality of Madrid, Spain
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, German

Job location

Remote
Municipality of Madrid, Spain

Tech stack

Microsoft Windows
Bash
Cloud Computing Security
Configuration Management
Continuous Integration
Software Debugging
Linux
DNS
Identity and Access Management
Linux System Administration
Linux Servers
Role-Based Access Control
Ansible
SharePoint
Data Logging
Information Security Management System
System Availability
Gitlab
Gitlab-ci
Kubernetes
Devsecops
Docker
Vulnerability Analysis

Job description

At apeirum, we embed senior engineers into growing European companies - no juniors dressed up as seniors, no agency layers, full accountability from day one.We're now looking for a DevSecOps / Infrastructure Engineer who runs self-hosted, security-first infrastructure end to end: from hardening a Linux server to operating multi-node Kubernetes in production, to keeping an ISO ***** ISMS audit-ready.This is a hands?on role for someone equally comfortable debugging a failing cluster upgrade in the morning and writing the change?management evidence an auditor reads three months later.If you like owning infrastructure rather than just consuming a managed cloud, you'll fit right in.The setup depends on where you're based: a permanent employment contract for candidates based in Spain, or a freelance/contract engagement for candidates based in Portugal.Fully remote within Spain and Portugal, on CET working hours.YOUR TASKSInfrastructure & DevSecOps (core focus):Administer and harden self-hosted Linux serversDesign, set up and operate self?managed, multi?node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability)Manage the Docker / container lifecycle across environmentsBuild and maintain Infrastructure?as?Code and configuration management (Helm, Kustomize, Ansible)Own CI/CD pipelines with integrated security scanning (GitLab CI/CD)Run the monitoring, logging and observability stack (Elastic)Design and operate encrypted backups: retention, rollover and restore validationDeliver controlled, repeatable system updates and upgradesAutomate and script infrastructure (Bash)Lead incident response and keep operational documentation currentManage DNS and domainsMicrosoft 365 administration:Administer and secure the tenant: Exchange Online, SharePoint Online, TeamsOwn identity and access management (Entra ID), MFA and conditional accessISO/IEC ***** / ISMS support:Maintain and improve ISMS documentation and policiesOperate and evidence ISO ***** controls (access management, logging, change management)Run risk assessments and track mitigationsPrepare for and support internal and external / surveillance auditsTHIS IS WHAT YOU BRING5+ years of hands?on infrastructure / DevSecOps experience in production, self?hosted environments (not purely managed cloud)Deep, operational Kubernetes knowledge - you've run clusters, not just deployed to themStrong Linux administration and hardening backgroundSolid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)Experience with observability (Elastic or comparable) and robust backup/restore practicesWorking knowledge of Microsoft 365 / Entra ID administration and securityPractical familiarity with ISO ***** / ISMS - controls, evidence and audits, not just theoryA security?first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatableFluent English; German is a plusBased in Spain or Portugal, able to work CET hoursTHIS IS WHAT WE BRINGRemote?first across Spain and Portugal, on CET - real collaboration, not async lagSenior?only culture - work alongside experienced engineers, no juniors to manageAI?leveraged engineering - modern AI tooling so one senior does the work of severalFlexible engagement - permanent employment (Spain) or freelance/contract (Spain or Portugal), your callEnd?to?end ownership of the stack, with the autonomy that comes with itVariety across infrastructure, cloud security and compliance work for interesting European clients#J-*****-Ljbffr

Requirements

and improve ISMS documentation and policiesOperate and evidence ISO ***** controls (access management, logging, change management)Run risk assessments and track mitigationsPrepare for and support internal and external / surveillance auditsTHIS IS WHAT YOU BRING5+ years of hands?on infrastructure / DevSecOps experience in production, self?hosted environments (not purely managed cloud)Deep, operational Kubernetes knowledge - you've run clusters, not just deployed to themStrong Linux administration and hardening backgroundSolid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)Experience with observability (Elastic or comparable) and robust backup/restore practicesWorking knowledge of Microsoft 365 / Entra ID administration and securityPractical familiarity with ISO ***** / ISMS - controls, evidence and audits, not just theoryA security?first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatableFluent English; German is a plusBased in Spain or Portugal, able to work CET hoursTHIS IS WHAT WE BRINGRemote?first across Spain and Portugal, on CET - real collaboration, not async lagSenior?only culture - work alongside experienced engineers, no juniors to manageAI?leveraged engineering - modern AI tooling so one senior does the work of severalFlexible engagement - permanent employment (Spain) or freelance/contract (Spain or Portugal), your callEnd?to?end ownership of the stack, with the autonomy that comes with itVariety across infrastructure, cloud security and compliance work for interesting European clients#J-*****-Ljbffr

About the company

Madrid, España At apeirum, we embed senior engineers into growing European companies - no juniors dressed up as seniors, no agency layers, full accountability from day one. We're now looking for a DevSecOps / Infrastructure Engineer who runs self-hosted, security-first infrastructure end to end: from hardening a Linux server to operating multi-node Kubernetes in production, to keeping an ISO ***** ISMS audit-ready.This is a hands?on role for someone equally comfortable debugging a failing cluster upgrade in the morning and writing the change?management evidence an auditor reads three months later. If you like owning infrastructure rather than just consuming a managed cloud, you'll fit right in.The setup depends on where you're based: a permanent employment contract for candidates based in Spain, or a freelance/contract engagement for candidates based in Portugal. Fully remote within Spain and Portugal, on CET working hours.YOUR TASKS

Apply for this position