Backend Security Architect: System Integrity & Trust

Creandum; Madrid; On-site; EUR 80,000 - 120,000; Full time

Job summary

Creandum is seeking a hands-on backend security engineer to design and build the System Integrity Layer. You will ensure every agent action is isolated, reproducible, and auditable, while enforcing strict security constraints by construction.

You will prototype and implement threat modeling, tamper-resistant event systems, and robust isolation within a multi-tenant environment, with automation baked into CI/CD and cryptographic verification across the pipeline.

Qualifications

• 5+ years designing production backend platforms and distributed systems.
• Deep schema design, RLS, and event-sourcing database expertise.
• Security architecture: practical application-level security, encryption models, key management.

Responsibilities

• Design the System Integrity Layer and threat modeling across distributed networks.
• Build append-only, tamper-resistant event systems for reconstructable actions.
• Engineer strict isolation between agents, users, and workflows in a multi-tenant infra.
• Improve CI/CD pipelines to guarantee integrity from code commit to production deployment.
• Translate regulatory and audit needs into low-level system constraints.

Skills

Backend systems

Distributed systems

Database design

Threat modeling

Policy as code

Security architecture

Adversarial mindset

Tools

Cerbos

OPA

Cedar

Job description

Creandum is seeking a hands-on backend security engineer to design and build the System Integrity Layer. You will ensure every agent action is isolated, reproducible, and auditable, while enforcing strict security constraints by construction.

You will prototype and implement threat modeling, tamper-resistant event systems, and robust isolation within a multi-tenant environment, with automation baked into CI/CD and cryptographic verification across the pipeline.