Senior Infrastructure & Security Engineer (Freelance)

Nicholson Search and Selection; France; Remoto; EUR 120.000 - 185.000; Tempo pieno

Descrizione del lavoro

Nicholson Search and Selection Ltd is seeking a Senior Infrastructure & Security Engineer to own the platform's reliability and compliance posture for enterprise clients in France.

You will build on GCP, drive SOC 2 and ISO 27001 readiness, and shape security controls from day one, with a clear path to leadership as the company grows. This is a remote freelance role in France with a strong emphasis on observability, IaC, and collaboration with auditors and client security teams.

Competenze

• 5+ years in SRE, platform, infrastructure or DevOps with production ownership.
• Deep, hands-on GCP experience (IAM, VPC, Cloud Run, Cloud SQL, GCS, Secret Manager, Cloud Armor). AWS or Azure on top is a plus, not a substitute.
• Experience with SOC 2 and/or ISO 27001 audits and controls.
• A language beyond YAML: TypeScript, Python or Go.
• Ability to hold a credible conversation with an auditor or a client's security team.

Mansioni

• Own infrastructure and security foundations for enterprise deals.
• Build the full GCP footprint under Terraform or Pulumi.
• Maintain CI/CD pipelines with GitHub Actions, including rolling out changes.
• Define SLOs and observability stack; manage incidents and response.
• Oversee security in development lifecycle, threat modelling and vulnerability management.
• Support SOC 2 and ISO 27001 controls and client security communications.

Conoscenze

SRE ownership

GCP expertise

TypeScript/Python/Go

Linux & Networking

SOC2/ISO27001 experience

Strumenti

Terraform

Pulumi

GitHub Actions

Vanta

Descrizione del lavoro

Senior Infrastructure & Security Engineer | GCP, SOC 2, ISO 27001 | Remote (France) | Freelance

Be the first infrastructure and security engineer at a startup that sells to France's largest companies. You'll build a platform that stays up and a security posture that passes audits, with a deliberate path to the CISO seat.

The company

A Paris-based B2B SaaS startup, less than a year old, that helps large shippers cut both their freight costs and their CO₂ emissions. It was founded by five partners: tech entrepreneurs and experts who have advised the transport departments of large corporations for more than twenty years. Two CAC 40 groups are already customers, the seed round is closed, and the tech team is deliberately small and very senior.

The role

Every enterprise deal goes through procurement, security questionnaires and external audit. You'll own the infrastructure and security foundations that make those deals possible. The platform runs on GCP (Cloud Run, Cloud SQL, GCS), with isolated environments designed in from day one: nothing to retrofit, everything to build. The SOC 2 and ISO 27001 program kicked off in September 2026 with an external specialist, on Vanta, so you'll shape the controls rather than inherit them.

Time split: roughly 50% platform and SRE, 25% security engineering, 25% compliance.

What you'll build

• The full GCP footprint under Terraform or Pulumi: projects, IAM, networking, services, databases, storage, secrets.
• CI/CD pipelines on GitHub Actions, with progressive rollout and rollback.
• SLOs that reflect what enterprise clients care about, a complete observability stack, and incident management that follows through.
• Network and IAM security, security in the development lifecycle, the threat model and vulnerability management.
• The technical side of SOC 2 and ISO 27001: controls, evidence automation, technical policies, and answers to client security teams.

What we're looking for

Must-haves

• 5+ years in SRE, platform, infrastructure or DevOps roles, with real production ownership.
• Deep, hands-on GCP experience (IAM, VPC, Cloud Run, Cloud SQL, GCS, Secret Manager, Cloud Armor). AWS or Azure on top is a plus, not a substitute.
• A language beyond YAML: TypeScript, Python or Go.
• Solid Linux, networking, TLS and PKI fundamentals, and a good grasp of database operations.
• Hands-on SOC 2 and/or ISO 27001 experience: controls implemented, evidence produced or an audit cycle completed.
• The ability to hold a credible conversation with an auditor or a client's security team.

Nice-to-haves

• Multi-tenant SaaS with strict data isolation.
• The Bun / TypeScript ecosystem or serverless container platforms.
• Securing LLM-based systems.
• Certifications (ISO 27001 Lead Implementer, CISSP, CCSP, GCP Professional Cloud Security Engineer), on top of hands-on work.
• French.

What you'll find here

• A first-hire role, with real decisions to make.
• A path to the CISO / Head of Security seat: owning the security management system, the security roadmap and eventually a team, as certifications land and the company grows.
• No 24/7 on-call: production support during business hours, with the CTO as backup.
• Compliance that matters: controls with real engineering value, not checkbox theatre.

Compensation and conditions

• Remote from anywhere in France; Paris-based candidates welcome.

Hiring process

• Phone call with the recruitment firm.
• Technical interview with the CTO: infrastructure, cloud architecture and your approach to the SOC 2 / ISO 27001 program.
• Practical exercise: threat modelling or infrastructure-as-code review on a realistic scenario (2 hours max).