Senior Infrastructure Engineer, EU

DFNS; Paris; À distance; EUR 140 000 - 220 000; Plein temps

Avantages offerts par ce poste

Stock options

Healthcare

Flexible vacation

Parental leave

Home technology allowance

MacBook and equipment

Résumé du poste

DFNS is building a modern onchain finance platform and is hiring a Senior Infrastructure Engineer to own the cloud and security stack. You will design and run AWS-based infrastructure, Kubernetes, and CI/CD pipelines to support regulatory-grade uptime and resilience.

Remote-first with an NY office option, you will work across regions and align SOC 2 and ISO 27001 controls with a focus on observability, encryption and secure enclaves.

Qualifications

• A record of designing and operating production infrastructure on AWS for systems where downtime or a breach has real consequences.
• Deep, hands-on Kubernetes and container experience, from cluster operations to workload hardening.
• Infrastructure as code with Terraform and CI/CD pipelines as the way you already work.
• Observability in practice (Datadog or equivalent) and experience running on-call and incident response.
• Working knowledge of infrastructure security and PKI fundamentals, including secrets, certificates and network segmentation.
• Scripting and systems programming (Python, Rust or TypeScript) to automate what you own.
• Experience administering and tuning SQL and NoSQL databases.

Responsabilités

• Design, build and run the cloud infrastructure behind the platform on AWS, with security and scale as first principles.
• Own the containerized platform (Docker, Kubernetes) and the way services are deployed, scaled and rolled back.
• Make every environment reproducible from code with Terraform and CI/CD, so a new region, a client environment or a recovery is a pipeline run rather than a project.
• Run observability end to end in Datadog (logs, metrics, traces) and turn it into alerting and on‑call practice that catches problems before clients do.
• Configure and operate the AWS Nitro Enclaves and secure workloads that protect key material and signing.
• Keep Node.js services and the databases behind them fast and reliable under real financial workloads.
• Support client deployments and due diligence, including hybrid and on‑premise models and the questions a bank’s infrastructure team will ask.
• Document what you build and carry the infrastructure controls through SOC 2 and ISO 27001 audits.

Connaissances

AWS production infrastructure

Kubernetes

Terraform

CI/CD pipelines

Datadog observability

Security and PKI

Scripting (Python, Rust, TypeScript)

SQL/NoSQL databases

Outils

Docker

OpenShift

GCP

Description du poste

Senior Infrastructure Engineer, EU

EU, remote first with NY office available · Full-time · Engineering · Reports to the CTO

About DFNS

Finance is moving onchain. Stablecoins, tokenized deposits, securities and funds are changing how money and assets are issued, held and transferred. The destination is a financial system where any asset can be issued, moved and governed onchain with the controls regulated institutions require. That shift needs a new foundation. Just as core banking systems manage accounts and ledgers today, financial institutions need a platform to manage digital assets. DFNS is that platform. Today, we secure hundreds of billions of dollars in assets every month for more than 500 clients worldwide.

Why this role

Our platform processes transactions for banks and fintechs around the clock and it has run at 99.997% uptime since 2022 with zero breaches. That record is the product. You will own the infrastructure beneath it, from the Kubernetes clusters and pipelines that ship it to the AWS Nitro Enclaves that protect the signing path, across SaaS, hybrid and on‑premise deployments at clients who run their own audits. In year one you will make every environment reproducible from code, turn observability into alerts that catch problems before clients do and carry the infrastructure controls through our SOC 2 and ISO 27001 audits.

What you’ll do

• Design, build and run the cloud infrastructure behind the platform on AWS, with security and scale as first principles.

• Own the containerized platform (Docker, Kubernetes) and the way services are deployed, scaled and rolled back.

• Make every environment reproducible from code with Terraform and CI/CD, so a new region, a client environment or a recovery is a pipeline run rather than a project.

• Run observability end to end in Datadog (logs, metrics, traces) and turn it into alerting and on‑call practice that catches problems before clients do.

• Configure and operate the AWS Nitro Enclaves and secure workloads that protect key material and signing.

• Keep Node.js services and the databases behind them fast and reliable under real financial workloads.

• Support client deployments and due diligence, including hybrid and on‑premise models and the questions a bank’s infrastructure team will ask.

• Document what you build and carry the infrastructure controls through SOC 2 and ISO 27001 audits.

What you bring

Must-haves

• A record of designing and operating production infrastructure on AWS for systems where downtime or a breach has real consequences.

• Deep, hands‑on Kubernetes and container experience, from cluster operations to workload hardening.

• Infrastructure as code with Terraform and CI/CD pipelines as the way you already work.

• Observability in practice (Datadog or equivalent) and experience running on‑call and incident response.

• Working knowledge of infrastructure security and PKI fundamentals, including secrets, certificates and network segmentation.

• Scripting and systems programming (Python, Rust or TypeScript) to automate what you own.

• Experience administering and tuning SQL and NoSQL databases.

Nice-to-haves

• Secure enclaves (AWS Nitro) or confidential computing.

• HSMs and on‑premise or hybrid deployments in regulated environments.

• Blockchain nodes and networks in production.

• Working knowledge of OpenShift, ECS, etc.

• Working knowledge of GCP.

How we work

We are a distributed company headquartered in Paris. Our teams work from Europe, the US and Asia, with offices in New York, Geneva, Dubai, Singapore, Hong Kong and São Paulo. We write decisions down so they survive time zones. We hold our own work to the standards our clients are held to. We hire people who can own an outcome end to end and we give them the room to do it.

What we offer

A competitive base salary set by role and location, a bonus or variable plan where the role carries one and stock options vesting over four years. Healthcare, flexible vacation, parental leave and a once‑a‑year home technology allowance, with travel expenses covered. A MacBook and the equipment you need to do your best work. Remote first, with an office if you want one.

Base salary range: €140,000-220,000

Hiring process

We aim to complete the process in 2 weeks and we tell you where you stand after every step.

• Intro call with Co‑CEO (30 minutes).

• Personality and cognitive assessments, completed on your own time (45 minutes).

• A technical take‑home exercise

• Focus Interviews (about 2.5 hours): code review (45 minutes), architecture review (45 minutes), cross function (30 minutes) and security best practices (30 minutes).

• Reference calls and background checks.

Equal opportunity

DFNS is an equal opportunity employer and considers every applicant based on ability and potential, regardless of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, disability, age or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we will arrange it.