DevSecOps / Infrastructure Engineer – Kubernetes, Linux, ISO 27001

This is a fully remote position, open to applicants in Spain.

📋 Description

• Manage and enhance self-hosted Linux servers.

• Design, configure, and manage self-directed, multi-node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability).

• Oversee the Docker/container lifecycle across various environments.

• Develop and sustain Infrastructure-as-Code and configuration management (Helm, Kustomize, Ansible).

• Take ownership of CI/CD pipelines with integrated security scanning (GitLab CI/CD).

• Operate the monitoring, logging, and observability stack (Elastic).

• Design and manage encrypted backups, including retention, rollover, and restore validation.

• Ensure controlled and repeatable system updates and upgrades.

• Automate and script infrastructure using Bash.

• Lead incident response efforts and maintain up-to-date operational documentation.

• Administer DNS and domains.

⛳️ Requirements

• Over 5 years of practical infrastructure/DevSecOps experience in production, self-hosted environments (not solely managed cloud).

• Profound operational knowledge of Kubernetes — you've managed clusters, not merely deployed to them.

• Strong background in Linux administration and hardening.

• Solid understanding of IaC and configuration management tools (Helm, Kustomize, Ansible) as well as CI/CD (GitLab).

• Experience with observability tools (Elastic or similar) and effective backup/restore practices.

• Familiarity with Microsoft 365/Entra ID administration and security.

• Practical knowledge of ISO 27001/ISMS — controls, evidence, and audits, not just theoretical understanding.

• A security-focused mindset, excellent documentation habits, and the discipline to maintain controlled and repeatable changes.

• Proficient in English; knowledge of German is a plus.

• Residing in Spain or Portugal, with the ability to work during CET hours.

🏝️ Benefits

• Remote-first work environment across Spain and Portugal, following CET — fostering real collaboration without asynchronous delays.

• Senior-only culture — collaborate with experienced engineers, without managing junior staff.

• AI-enhanced engineering — utilize modern AI tools to increase efficiency, allowing one senior engineer to accomplish the work of several.

• Flexible engagement options — choose between permanent employment (Spain) or freelance/contract work (Spain or Portugal).

• Full ownership of the technology stack, accompanied by the autonomy it entails.

• Diverse opportunities across infrastructure, cloud security, and compliance work for engaging European clients.