Senior DevOps Engineer

LocalStack; Zürich; Vor Ort; GBP 89.000 - 133.000; Vollzeit

Zusammenfassung

LocalStack, the Local Cloud Sandbox for Developers and AI Agents, is seeking a senior cloud infrastructure engineer to own our internal cloud platform. You will manage multi-account AWS environments, enforce security governance, and drive cost efficiency in a remote-first setup.

You will implement IaC with Terraform/OpenTofu/CDK/Pulumi, evolve systems toward SOC 2 Type II and ISO 27001 readiness, and collaborate with engineering teams to improve reliability and scalability across distributed

Qualifikationen

• Extensive AWS org setup with Control Tower and multi-account strategy.
• Experience turning SOC 2 / ISO 27001 requirements into audit-ready controls.
• Hands-on IAM, SSO, MFA, and joiner/mover/leaver lifecycle.
• Self-hosted internal tooling maintenance and uptime ownership.
• Cost governance and FinOps fundamentals.
• Willingness to work in a remote-first, distributed team.
• Strong scripting (Bash/Python/Go).

Aufgaben

• Own internal cloud infrastructure and serve as primary contact for cloud operations and infrastructure requests.
• Manage and improve multi-account cloud environment with security, governance, and compliance practices.
• Support and maintain SOC 2 Type II and ISO 27001 compliance with continuous audit evidence.
• Operate and improve identity management including SSO, MFA, and access lifecycle.
• Maintain self-hosted internal services and ensure uptime and SLAs.
• Monitor cloud health and posture; identify and address vulnerabilities.
• Own cloud cost management and collaborate to identify cost/reliability risks.
• Collaborate with engineering to improve reliability, scalability, and operational excellence.

Kenntnisse

AWS multi-account

IAM/SCPs

SOC 2 / ISO 27001

SSO / MFA

Cost / FinOps

Terraform

CDK

Pulumi

Python / Bash / Go

Remote-first

Tools

Terraform

CDK

Pulumi

OpenTofu

Security Hub/GuardDuty

Jobbeschreibung

LocalStack - the Local Cloud Sandbox for Developers and AI Agents

We are a fast-growing Series A startup building cutting-edge technology to revolutionize cloud development processes and support highly efficient dev&test feedback loops. We’ve closed our last $25mil round in Q4 2024, led by Notable Capital, CRV and Heavybit.

LocalStack is a local cloud development platform. LocalStack makes it easier, faster, and less expensive for software teams to ship reliable, high-quality applications to the cloud.

The cloud was built to run software, not to support AI-native development workflows. As the world's leading local cloud development platform, LocalStack provides secure local sandboxes that simulate cloud environments, enabling AI agents and software developers to find and fix risks faster and more effectively than they can in the cloud.

Our customer base ranges from SMBs to Global Fortune 500 companies. Our clients include companies like NASA, Harness, IBM, Workday, Comcast, Apple, 3M, Block and many more.

We are sustainably growing our globally distributed teams across GTM, operations and engineering. In 2025 we almost doubled in size and continue to grow across all areas in 2026.

LocalStack is headquartered in Zurich/Switzerland, with a small engineering office in Vienna/Austria and remote team members from 25 countries including the US, FR, UK, CA, ES, and many more! Check our Notion Candidate Handbook and our GitHub!

What you will be working on/responsible for

• Own the internal cloud infrastructure and serve as the primary point of contact for cloud operations and infrastructure requests.

• Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied.

• Support and maintain compliance with SOC 2 Type II and ISO 27001, ensuring audit evidence is prepared continuously rather than only during audit periods.

• Operate and improve our identity and access management, including SSO, MFA, permissions, and joiner/mover/leaver processes.

• Maintain and monitor self-hosted internal services, ensuring they meet agreed service levels and that vulnerabilities are tracked and resolved efficiently.

• Monitor the security and health of our cloud environment through continuous posture management and proactive risk identification.

• Own infrastructure cost management for the services under your responsibility and help other teams proactively identify cost or reliability risks before they become issues.

• Collaborate with engineering teams to improve the reliability, scalability, and operational excellence of our cloud platform.

Experience we expect you to bring to the role

• Deep AWS experience at org level: Organizations, Control Tower, multi-account landing zones, IAM/SCPs, Security Hub/GuardDuty, VPC and multi-AZ networking

• IaC as the only way infrastructure gets created - module design, state management, review and promotion between environments. Tool-agnostic, but real depth in at least one (Terraform/OpenTofu, CDK, Pulumi)

• Understands how to evolve existing systems toward compliance - can look at a running estate and work out what has to change, in what order, to satisfy SOC 2 / ISO 27001. Having been through an audit or certification is a bonus, not a requirement

• Internal workforce identity and access: IdP-backed SSO/MFA, centralised access management, automated joiner/mover/leaver

• Self-hosting and operating shared internal tooling that other teams depend on - deploy, upgrade, back up, own the uptime

• Observability and alerting design, plus on-call for a distributed team

• Cloud cost management / FinOps fundamentals

• Azure is a nice-to-have extension, not a requirement - AWS depth is what matters, but the estate is going multi-cloud so appetite for it counts

• Bash, Python and/or Go for tooling. Comfortable with ambiguity in a remote-first environment, and happy being the first hire in a function

Values we hold in LocalStack

• Care: we create with compassion. We prioritize empathy and understanding in every interaction. By genuinely caring for our team, customers, and community, we create an environment where people thrive and impactful work flourishes

• Ownership: we own the outcome. We take responsibility for our work and are passionate about its impact. We foster autonomy, inspire ambition, encourage ownership, and empower everyone to unlock their potential and make an impact.

• Openness: we build trust together. We build trust through open communication and honest feedback. By sharing ideas and embracing diverse perspectives, we create stronger, more connected teams that work toward shared goals.

• Courage: we dare to innovate. We embrace bold challenges and take calculated risks to move the needle. We step outside our comfort zones, experiment fearlessly, and turn setbacks into springboards for growth.

• Excellence: we chase the extraordinary. We chase excellence by pushing boundaries and delivering results that go beyond the ordinary, constantly raising the bar and striving for greatness in everything we do. Excellence is not just the outcome, itʼs how we approach every task with purpose, passion, and a commitment to delivering exceptional value.