Devsecops / Infrastructure Engineer (Kubernetes, Linux & Iso 27001)
Role details
Job location
Tech stack
Job description
At apeirum, we embed senior engineers into growing European companies - no juniors dressed up as seniors, no agency layers, full accountability from day one.We're now looking for a DevSecOps / Infrastructure Engineer who runs self-hosted, security-first infrastructure end to end: from hardening a Linux server to operating multi-node Kubernetes in production, to keeping an ISO ***** ISMS audit-ready.This is a hands?on role for someone equally comfortable debugging a failing cluster upgrade in the morning and writing the change?management evidence an auditor reads three months later.If you like owning infrastructure rather than just consuming a managed cloud, you'll fit right in.The setup depends on where you're based: a permanent employment contract for candidates based in Spain, or a freelance/contract engagement for candidates based in Portugal.Fully remote within Spain and Portugal, on CET working hours.YOUR TASKSInfrastructure & DevSecOps (core focus):Administer and harden self-hosted Linux serversDesign, set up and operate self?managed, multi?node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability)Manage the Docker / container lifecycle across environmentsBuild and maintain Infrastructure?as?Code and configuration management (Helm, Kustomize, Ansible)Own CI/CD pipelines with integrated security scanning (GitLab CI/CD)Run the monitoring, logging and observability stack (Elastic)Design and operate encrypted backups: retention, rollover and restore validationDeliver controlled, repeatable system updates and upgradesAutomate and script infrastructure (Bash)Lead incident response and keep operational documentation currentManage DNS and domainsMicrosoft 365 administration:Administer and secure the tenant: Exchange Online, SharePoint Online, TeamsOwn identity and access management (Entra ID), MFA and conditional accessISO/IEC ***** / ISMS support:Maintain and improve ISMS documentation and policiesOperate and evidence ISO ***** controls (access management, logging, change management)Run risk assessments and track mitigationsPrepare for and support internal and external / surveillance auditsTHIS IS WHAT YOU BRING5+ years of hands?on infrastructure / DevSecOps experience in production, self?hosted environments (not purely managed cloud)Deep, operational Kubernetes knowledge - you've run clusters, not just deployed to themStrong Linux administration and hardening backgroundSolid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)Experience with observability (Elastic or comparable) and robust backup/restore practicesWorking knowledge of Microsoft 365 / Entra ID administration and securityPractical familiarity with ISO ***** / ISMS - controls, evidence and audits, not just theoryA security?first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatableFluent English; German is a plusBased in Spain or Portugal, able to work CET hoursTHIS IS WHAT WE BRINGRemote?first across Spain and Portugal, on CET - real collaboration, not async lagSenior?only culture - work alongside experienced engineers, no juniors to manageAI?leveraged engineering - modern AI tooling so one senior does the work of severalFlexible engagement - permanent employment (Spain) or freelance/contract (Spain or Portugal), your callEnd?to?end ownership of the stack, with the autonomy that comes with itVariety across infrastructure, cloud security and compliance work for interesting European clients#J-*****-Ljbffr
Requirements
and improve ISMS documentation and policiesOperate and evidence ISO ***** controls (access management, logging, change management)Run risk assessments and track mitigationsPrepare for and support internal and external / surveillance auditsTHIS IS WHAT YOU BRING5+ years of hands?on infrastructure / DevSecOps experience in production, self?hosted environments (not purely managed cloud)Deep, operational Kubernetes knowledge - you've run clusters, not just deployed to themStrong Linux administration and hardening backgroundSolid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)Experience with observability (Elastic or comparable) and robust backup/restore practicesWorking knowledge of Microsoft 365 / Entra ID administration and securityPractical familiarity with ISO ***** / ISMS - controls, evidence and audits, not just theoryA security?first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatableFluent English; German is a plusBased in Spain or Portugal, able to work CET hoursTHIS IS WHAT WE BRINGRemote?first across Spain and Portugal, on CET - real collaboration, not async lagSenior?only culture - work alongside experienced engineers, no juniors to manageAI?leveraged engineering - modern AI tooling so one senior does the work of severalFlexible engagement - permanent employment (Spain) or freelance/contract (Spain or Portugal), your callEnd?to?end ownership of the stack, with the autonomy that comes with itVariety across infrastructure, cloud security and compliance work for interesting European clients#J-*****-Ljbffr