Platform And Security Engineer

Atlys; New Delhi; On-site; INR 3,000,000 - 7,000,000; Full time

Benefits offered by this job

Competitive compensation & equity

Health insurance

Paid time off

Office meals

Learning credits

Relocation support

Good tooling and equipment

Office with amenities

Job summary

Atlys in India seeks a Platform & Security Engineer to own cloud infrastructure, security posture and reliability of our AI-first travel platform. You will design secure-by-default systems, automate toil away, and give engineers a paved road to ship securely.

You’ll be second engineer on the Infra & Security team, taking ownership from week one and shaping major parts of the infrastructure and security roadmap as we scale globally.

Qualifications

• 4+ years of experience in infrastructure, DevOps, security engineering for a product company handling sensitive or regulated data.
• Strong fundamentals in Linux, networking (DNS, TLS, HTTP), containers and Kubernetes, and at least one public cloud.
• Security fundamentals (identity and access, encryption, secrets management, OWASP Top 10) applied in production.
• Willingness to own end-to-end domains and balance security, speed and developer experience.

Responsibilities

• Own our cloud infrastructure and run/upgrade Kubernetes on GCP (some workloads on AWS).
• Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps.
• Make the platform observable: centralize logs/metrics/traces, set trusted alerting, participate in on-call and incident response.
• Run data layer: database performance, backups, access automation, caching and messaging infrastructure.
• Enforce least-privilege IAM across cloud/Kubernetes/GitHub, enable zero-trust access and clean offboarding.
• Design and harden controls/audit logs for PII and sensitive data.
• Integrate security into shipping: SAST/DAST, dependency scans, SBOMs; manage vulnerabilities with owners.
• Secure AI products: threat-model AI agents, manage prompts, data leakage and secrets.

Skills

Linux

Networking

Kubernetes

Cloud

Security engineering

CI/CD

Tools

GCP

AWS

GitHub

CI/CD tools

Job description

Job Description:

About Atlys

Our mission is to enable every person on Earth to travel freely.

Travel should feel exciting. Instead, too much of it is still defined by paperwork, uncertainty, and processes that were never designed for travellers.

Atlys is changing that.

We're building an AI-first platform that removes friction and uncertainty from travel. To date, we've processed visas for 1M+ travellers across 127 countries. But we're still early. We're now building AI-native products too, including agents that act on behalf of travellers.

The Role

We're looking for a Platform & Security Engineer to own the foundations that keep Atlys fast, reliable and secure.

Not someone who simply keeps servers running or closes tickets from a scanner. We're looking for someone who treats infrastructure and security as products: who designs systems that are secure by default, automates away toil, and gives every engineer a paved road to ship safely.

Few companies handle data as sensitive as ours. Passports, financial documents, photographs and identity records flow every day between travellers, partners and government systems across 127 countries. You'll own the cloud infrastructure, security posture and reliability of the platform that processes it, and make sure it scales as we grow.

You'll be the second engineer on our Infra & Security team. That means real ownership from week one: you'll take over large parts of our infrastructure and security roadmap, not a narrow slice of it.

We don't expect you to have done all of this before. We care far more about strong fundamentals and the ability to figure things out. You'll have AI tools at your disposal and the room to learn whatever you haven't touched yet.

The Job

• Own our cloud infrastructure. Run and improve our Kubernetes platform on GCP (with some workloads on AWS). Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps.

• Make the platform observable and reliable. Bring logs, metrics and traces into one place, set up alerting that people trust, and take part in on-call and incident response. Keep an eye on cloud cost and catch anomalies early.

• Run our data layer. Own database performance optimizations, backups and access automation, along with caching and our messaging infrastructure.

• Lock down access. Enforce least-privilege IAM across cloud, Kubernetes and GitHub. Run zero-trust access to internal services, SSO, and clean offboarding.

• Protect sensitive data. Design and harden access controls and audit logging for PII such as passports, financial documents and identity records.

• Build security into how we ship. Add SAST, DAST, dependency and container scanning, and SBOMs to CI/CD. Run vulnerability management and coordinate pentests. Find and validate application security issues (authorization, authentication, business logic, injection), drive fixes with service owners, and fix directly where it makes sense.

• Secure our AI products. Threat-model and harden AI agents and assistants that act on users’ behalf: prompt injection, tool and OAuth scope permissions, data leakage between users, and secrets handling.

The Ideal Candidate

Youll likely thrive in this role if you:

• Have 4+ years of experience in infrastructure, DevOps, security engineering, ideally at a product company handling sensitive or regulated data.

• Have strong fundamentals in Linux, networking (DNS, TLS, HTTP, load balancing), containers and Kubernetes, and at least one public cloud.

• Understand security fundamentals (identity and access, encryption, secrets management, the OWASP Top 10) and have applied them in production, not just on paper.

• Are strong in either infrastructure or security, and genuinely want to get good at the other.

• Take ownership end to end. You make pragmatic trade-offs between security, speed and developer experience. You explain risk clearly and bring engineers along rather than acting as a gatekeeper.

• Can write code to automate your way out of problems (Python, Go or Bash), and are comfortable reading application code.

• Figure things out. When you hit something new, you read the docs, use AI tools well, test your assumptions and ship.

Nice-to-Have:

• Prior web or backend development experience

• Exposure to compliance frameworks such as DPDPA, ISO 27001 or SOC 2

• Experience securing LLM applications or AI agents

We hire exceptional people for their craft, not travel enthusiasts. We solve hard problems that happen to touch global travel and government infrastructure.

What you can expect

Atlys is built by a small team with outsized ambition, high ownership, and an obsession with doing great work.

Heres what you can expect:

• Competitive compensation and equity so you participate in the value you help create.

• Comprehensive health insurance covering you and your family, plus annual preventive health check-up on us.

• A thoughtful leave policy with paid time off and company holidays, because great work also requires real time off.

• Lunch, high tea and dinner at the office, so the basics are taken care of while we build together.

• Learning & development credits to invest in courses, books, conferences and tools that help you get better at your craft.

• Relocation support to make moving closer to the team as seamless as possible.

• Great tools to do your best work, including high-spec equipment and software.

• An office designed for more than just work, with pickleball, table tennis, PlayStation, an arcade game room, an F1 simulator and even a full flight simulator.

Our values shape how we make decisions, work together and build for travelers. The bar is high, the pace is fast, and the way we work is deliberate. If this environment energizes you, you'll probably thrive here. If it doesn't, it's better to know that upfront.

Come build the intelligence layer for global travel

Requirements: