The Position

• Join the infrastructure team behind MDaaS — a real-time malware scanning platform handling 30M+ requests/day, built on AWS, Kubernetes, and event streaming.

• You'll work in an agile scrum team, owning infrastructure-as-code, CI/CD pipelines, and observability. Security and compliance are first-class requirements, not afterthoughts.

What You Will be Doing

• Deploy and maintain workloads on EKS via ArgoCD — review GitOps PRs, handle sync failures, approve image updates

• Write and update Helm charts / Kustomize overlays across dev / staging / prod

• Triage alerts from Prometheus / Grafana / Coralogix — root cause analysis, resolve or escalate

• Review and apply Terraform changes — plan, validate, and merge infra PRs (EKS, MSK, ALB, IAM)

• Maintain CI/CD pipelines on Bitbucket Pipelines and GitHub Actions — fix broken builds, integrate security scans

• Configure and tune KEDA ScaledObjects for Kafka / RabbitMQ consumers

• Triage CVEs from Blackduck / Trivy reports — prioritize CVSS ≥ 7.0, coordinate patches with dev team

• Rotate secrets, verify External Secrets Operator sync, enforce no-hardcoded-credentials policy

• Document infrastructure and application changes for engineers and QA

• Participate in on-call rotation — incident response, post-mortems, runbook updates

• Research new tools and technologies to address current pain points and improve system reliability, scalability, and security — evaluate, prototype, and propose adoption when appropriate

What We Need From You

Education & Background

• BA/BS in Computer Science, Engineering, or equivalent hands-on experience

Soft Skills

• Strong verbal and written communication in English

• Self-motivated; works well in a fast-paced, collaborative team

• Eager to learn new tools and apply them quickly

• Passionate about solving problems in a principled, elegant way

• Comfortable both teaching and learning from teammates

Cloud & Infra

• AWS hands-on: EKS, ECR, IAM/IRSA, MSK, S3, ALB, VPC, Security Groups

• Terraform: write modules, manage remote state, integrate with CI

• Kubernetes: RBAC, ingress, network policies, HPA, resource tuning — cluster management via Rancher or K9s

• Helm + Ansible: author charts and playbooks, manage versioning

• Docker: multi-stage builds, image optimization

• Linux/Windows systems administration

CI/CD & GitOps

• Bitbucket Pipelines, GitHub Actions, or TeamCity — write and maintain, not just use

• ArgoCD: sync policy, health checks, rollback

• PR-based deployments; no direct commits to main/prod

Observability

• Prometheus, Grafana, CloudWatch, Elasticsearch — setup and maintain

• Structured logging, alert routing, dashboard authoring

Security

• Least privilege: IAM, IRSA, K8s RBAC — no wildcard permissions

• Secret management: External Secrets / AWS Secrets Manager, zero hardcoded credentials

• Supply chain: dependency scanning (Blackduck / Snyk / Trivy), CVE triage by CVSS score

• Network segmentation: private subnets, Security Groups, ingress/egress control

• Working knowledge of ISO/IEC 27001 and SOC 2 Type II — access control, audit trail, change management

• Familiar with CIS Benchmarks for Kubernetes and Linux hardening

Development

• Python and/or Go — scripting, tooling, automation

• Able to read Node.js/TypeScript code to debug service issues independently

AI & Tooling

• Actively uses AI coding tools (GitHub Copilot, Cursor, Claude) in daily workflow — writing scripts, Terraform modules, Helm templates, and debugging

• Knows how to prompt effectively, verify AI output, and not blindly trust generated infrastructure code

Nice-to-have

• Experience in the cybersecurity industry

• Knowledge of compliance frameworks: NIST CSF, HIPAA, GDPR — applied to real infrastructure

• Istio: mTLS, VirtualService/DestinationRule, traffic management

• KEDA advanced: custom metrics, scale-to-zero, cooldown tuning

• Kafka (MSK) operations: topic management, consumer lag, AKHQ

• Policy-as-code: OPA/Gatekeeper or Kyverno

• OWASP container and API security principles

• Coralogix / Datadog with OpenTelemetry — custom pipelines, alert routing

• Kubecost cost analysis, Kubeshark traffic capture

• Experience with large-scale systems: 30M+ requests/day

• Azure exposure (secondary to AWS)

• Has used AI to generate, review, or optimize infrastructure-as-code (Terraform, Helm, bash scripts) and understands its limitations: hallucinations, outdated API references, security blind spots

• Experimented with AI APIs (OpenAI, Anthropic) to build internal automation or tooling

You will deploy and maintain our edge data centers for compute, AI and storage, contribute to the installation, migration, updates and integration of hypervisor services and modules. Maintain and optimize active projects. Participate in the development process of new projects and document the architecture and components.

Responsibilities

• Design, deploy, and manage highly available, scalable, and secure infrastructure solutions which include: Kubernetes on bare metal, Proxmox and Ceph
• Design and maintain Kubernetes, Ceph and Proxmox platforms for engineering team consumption
• Ensure that hardware design meets business and technical requirements, including performance, scalability, and reliability
• Evaluate and recommend new technologies and tools to improve the efficiency and effectiveness of virtualization solutions
• Ensure the reliability, performance, and scalability of our edge data centers
• Troubleshoot and resolve complex infrastructure issues, ensuring optimal performance and reliability
• Develop and maintain infrastructure-as-code (IaC) modules and configuration management to automate deployment, management, and monitoring processes

Essential Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.
• Proven experience in developing Ansible roles and playbooks with idempotency.
• Proficiency in creating Terraform/Tofu modules.
• Strong GitOps mindset.
• In-depth knowledge of Linux networking
• Strong problem-solving and troubleshooting skills
• Familiarity with KVM/QEMU virtualization.
• Understanding of Ceph storage solutions.

Preferred:

• Experience with VXLAN, software-defined networking, and SR-IOV for smart NICs.
• Familiarity with the BGP protocol and configuring FRR or Bird.
• Experience with Terragrunt.
• Proficiency in using Ansible Tower or AWX.
• Proficiency in Python

#LI-KG1

#LI-REMOTE

We are working with a decentralised exchange which looks to innovate on providing the best of CEXs and DEXs, focusing on building a safe, simple and scalable platform for trading. They differentiate themselves by offering institutional level systems and support whilst remaining on-chain and decentralised.

We are in search of a Security Engineer to join their vibrant team, where you will play a crucial role in pinpointing risks across the organisation. Collaborating with each team, you will focus on identifying, alerting, mitigating, and preventing risks. This role offers you the chance to contribute to shaping, constructing, and pioneering security solutions in a swiftly evolving industry.

What you’ll be doing:

• Architecting, implementing, and managing comprehensive security solutions.
• Establish and enforce security policies, standards, and guidelines that comply with industry regulations and best practices.
• Participate in penetration testing and purple teaming with ongoing or new projects to ensure their security posture is at a high level.
• Monitor and respond to security incidents, ensuring quick resolution.
• Build automation and leverage security frameworks with engineers that are able to improve security and reduce friction.
• Take part in critical discussion topics, with the ability to challenge decisions and the status quo; we take collaboration and feedback seriously, believing it is one of the foundational principles of a great team.

What we’re looking for:

• Strong Information Security (InfoSec) skills, with proven experience in application security or a relevant field.
• Hands-on experience of developing, engineering, or architecting within a public cloud environment.
• Experience with engineering, using infrastructure-as-code (such as Terraform and Ansible).
• Experience with performing threat modelling exercises or a very good understanding of the methodology and ability to assess a project's risk.
• Understanding of container and DevSecOps concepts (we use DefectDojo) with CI/CD experience.
• Familiarity with blockchain technology and cryptocurrency trading platforms.

Bonus Points:

• Professional certifications such as OSCP, CISSP, CDP & CMTP.
• Experience with IT security frameworks such as SOC 2 and ISO 27001.

#LI-REMOTE