DevSecOps Engineer – Remote (EMEA)

About the role

We are looking for a Security & Infrastructure Engineer with strong AWS and compliance experience to lead the evolution of the company’s security posture and enterprise‑grade infrastructure foundation. This hands‑on role will design secure cloud architectures, implement PCI DSS controls, improve platform resilience and embed security best practices across the engineering organization.

Key responsibilities

• Lead implementation of PCI DSS controls across infrastructure and application layers.
• Design and secure AWS infrastructure using best practices around IAM, networking, and encryption.
• Own Infrastructure as Code and improve deployment reliability across environments.
• Integrate security into CI/CD pipelines and engineering workflows.
• Improve platform scalability, observability, reliability, and fault tolerance.
• Manage security tooling, monitoring, logging, and incident readiness processes.
• Partner with auditors and internal stakeholders on compliance initiatives.
• Define cloud security and infrastructure best practices across the engineering team.
• Mentor engineers on secure infrastructure and development practices.
• Contribute to long‑term platform architecture and operational strategy.

Required profile

• 4+ years of experience in DevOps, Platform Engineering, Infrastructure Engineering, or related backend infrastructure roles.
• Strong hands‑on AWS experience in production environments.
• Proven experience implementing or working with PCI DSS, SOC 2, ISO 27001, or similar compliance frameworks.
• Experience with Infrastructure as Code tools such as Terraform, CDK, Pulumi, or similar.
• Deep understanding of IAM and least‑privilege access design.
• Knowledge of network security concepts (VPCs, subnets, isolation, segmentation).
• Expertise in encryption, secrets management, and secure infrastructure design.
• Experience building and operating secure, scalable cloud systems.
• Strong understanding of DevSecOps principles and secure CI/CD workflows.
• Ability to make pragmatic infrastructure and security decisions in fast‑moving environments.

Required skills

• AWS
• PCI DSS
• SOC 2
• ISO 27001
• Terraform
• CDK
• Pulumi
• IAM
• VPC / networking / segmentation
• Encryption
• Secrets management
• CI/CD pipelines
• Monitoring and logging tools