Platform Engineer (Security, Compliance & DevOps)

Dalea; København; On-site; DKK 725,000 - 900,000; Full time

Benefits offered by this job

7P scheme

Pension: ASE

Warrants

Job summary

Dalea is building a data management platform for biology and lab workflows. We are hiring a production infrastructure and security lead to own the underlying platform running on Docker Compose and Kubernetes, with a strong focus on GxP compliance and data integrity.

You will work hands-on to secure and scale the system, implement ISO 27001/SOC 2 controls, and support regulated software validation for customers in biotech and pharma. This is a full-time, on-site role in Copenhagen.

Qualifications

• You've owned production infrastructure and deployment for a system holding sensitive data.
• Hands-on security engineering: access control, encryption, logging and incident response.
• Experience with ISO 27001, SOC 2, or with GxP and regulated software (21 CFR Part 11, EU Annex 11). One of the two is enough.
• You've built and maintained production platform software in a small team or early product where you made decisions.

Responsibilities

• Own and maintain the data platform infrastructure (Docker Compose, Kubernetes, CI/CD, monitoring, backups).
• Improve security controls: access, encryption, logging, incident response.
• Audit and maintain GxP-compliant infrastructure with 21 CFR Part 11, EU Annex 11 and W3C PROV provenance.
• Ensure ISO 27001 controls and audit readiness.
• Support controlled releases and validation for customers running GxP.

Skills

Production infra ownership

Security engineering

ISO27001 / SOC2 / GxP

Production platform dev

Tools

Docker

Kubernetes

Job description

Dalea

• BioInnovation Institute, Copenhagen


• Full-time

Starts when our funding round closes.

Keep a Part 11 and Annex 11 compliant lab data platform secure, reliable and trusted, and own the infrastructure it runs on.

We ask pharma and biotech teams to trust a young company with their most valuable research data. That's a big decision, and they're right to be careful. Dalea already has the safeguards. You'll keep them strong, improve them, and make them easy to verify.

What you'll own

• The infrastructure: Docker Compose, Kubernetes, Scaleway, CI/CD, monitoring and backups.


• Security: access control, encryption, logging and incident response.


• Our GxP setup, which is already built: a full audit log, 21 CFR Part 11 and EU Annex 11 compliant infrastructure, W3C PROV provenance for every entity and operation, rollback engines, and export to machine-readable regulatory formats. You'll audit it, maintain it and make it better.


• Our ISO 27001 certification and the controls behind it.


• Controlled releases, and validation support for customers who run GxP work in Dalea.


• Making trust verifiable: clear security and compliance documentation, and joining customer reviews when the questions get technical.

What you bring

Must-haves

• You've owned production infrastructure and deployment (containers, CI/CD, cloud) for a system holding sensitive data.


• Hands-on security engineering: access control, encryption, logging and incident response.


• Hands-on experience with ISO 27001 or SOC 2, or with GxP and regulated software (computer system validation, 21 CFR Part 11, EU Annex 11). One of the two is enough.


• You've built and maintained production platform software in a small team or early product where you made decisions.

Nice To Have (none Of Them Required)

• Experience with both compliance areas above


• Vendor audits by pharma customers


• Part 11 or Annex 11 systems in practice


• Provenance or lineage systems (W3C PROV)


• Customer security questionnaires


• Kubernetes


• TypeScript or Python

You don't need deep frontend skills, lab or biology knowledge, a PhD or Danish. If you match the must-haves, apply, even if you have none of the nice-to-haves.

Our stack

TypeScript, Next.js and React. Python for our MCP service. An agent harness built on Mastra. Docker Compose and Kubernetes, hosted on Scaleway.

How we work

Our dev team is the two founders plus up to three new developers, led by our CTO. We discuss progress and priorities closely and continuously, and we expect you to take part: share ideas early, argue for what you think is right, and change course when the evidence says so.

You won't need permission to fix what's broken, and what you build reaches production quickly. We work together at BioInnovation Institute 3–5 days a week. We're building the team and the way we work, and that happens best in person.

About Dalea

Dalea is a data management platform for biology and lab workflows. Experiments, structured data, samples and inventory sit in one place, with full data provenance. Everything a lab builds in Dalea can be packaged and shared, so we're building a GitHub for life science: labs publish and reuse each other's workflows instead of rebuilding them from scratch. We work with biotech startups, academic labs, pharma R&D and CROs.

Timing and our funding round

This position depends on our current funding round closing, which we expect in February/March 2027. We can make a conditional offer before then, and we'll be open with you about the timing throughout the process.

What we offer

• Salary: DKK 725,000–900,000 per year, depending on experience


• Warrants: under the Danish


• 7P scheme


• Pension: through ASE


• Location: BioInnovation Institute, Copenhagen, on-site 3–5 days a week. You'll need to live in the Copenhagen area or be willing to move here. We're happy to hear from people relocating within the EU.


• Language: English


• Start: when the round closes