DevOps Engineer

Infoplus Technologies UK Limited; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Job summary

Infoplus Technologies UK Limited is seeking a platform engineer to design and operate an interactive access service, containerized on OpenShift, translating HTTPS to native protocols. You will build a scalable SaaS file transfer service using S3 presigned URLs with tenant isolation and automated credential workflows.

The role requires strong Linux engineering, IaC and CI/CD experience, plus knowledge of security best practices and logging stacks. Amsterdam-based, full-time role.

Qualifications

• 3+ years hands-on experience with Kubernetes/OpenShift in production environments.

Responsibilities

• Design and operate interactive access service using Apache Guacamole on OpenShift.
• Build and maintain file transfer service with S3 presigned URLs and tenant-scoped access controls.
• Engineer tenant isolation in shared SaaS-style deployments ensuring team-only access to their targets.

Skills

Kubernetes/OpenShift

Go

Python

Linux systems

CI/CD pipelines

S3 storage

Azure DevOps

security principles

IAM systems

logging/monitoring

Tools

Helm

ArgoCD

Tekton

MinIO/AWS S3

Job description

• Design and operate the interactive access service based on Apache Guacamole, containerized on OpenShift, translating HTTPS to native protocols (SSH, RDP, SQL, VNC)
• Build and maintain the file transfer service using S3 presigned URLs with time-bound expiry and tenant-scoped bucket/path access controls
• Engineer tenant isolation within shared SaaS-style deployments, ensuring each consuming team only accesses their own targets through predefined connections and network-level controls
• Design credential lifecycle automation: retrieval/seeding at session start, reset/removal at session stop, integrated with Privileged Access Management and credential stores
• Build session recording and logging pipelines shipping audit data to tenant-specified log repositories (Kafka, S3, Git)
• Implement metering and billing event generation for per-tenant consumption tracking
• Develop CI/CD pipelines for automated platform lifecycle management: provisioning, start, stop, decommissioning (immutable infrastructure / cattle model)
• Collaborate with security teams to refine detection scenarios every sprint and maintain audited control reporting (Seven IT Risk Controls, COBIT framework)
• Define and monitor SLIs/SLOs: start latency, session success rate, recording completeness, tenant isolation violations, credential reset compliance

Required Skills & Experience

• 3+ years hands-on experience with Kubernetes/OpenShift in production (deployment, networking, RBAC, persistent storage, operators)
• Proficiency in Go and Python for platform service development, automation, and tooling
• Strong Linux systems engineering (SSH, networking, security hardening, systemd)
• Container orchestration and CI/CD pipeline design (Helm, ArgoCD, Tekton, or equivalent)
• S3-compatible object storage (MinIO or AWS S3): presigned URLs, bucket policies, IAM integration
• Azure DevOps for backlog management, CI/CD pipelines, and release workflows
• Understanding of security principles: zero-trust, defence-in-depth, protocol insulation, MFA, credential management
• Experience with IAM systems, directory services integration, and conditional access policies
• Familiarity with logging and monitoring stacks (Kafka, Elasticsearch, Prometheus/Grafana)

Nice to Have

• VMware Cloud Foundation (VCF) experience or familiarity with VCF-based infrastructure
• Experience with Privileged Access Management tooling (CyberArk, HashiCorp Vault)
• Experience with Apache Guacamole or similar remote access gateway technologies
• RDP and Windows Server administration knowledge
• Experience in regulated financial services environments (DORA, NIS2, or equivalent regulatory frameworks)
• Understanding of network segmentation and firewall rule management
• SOC2 Type 2 reporting or equivalent security assurance frameworks