Remote Senior Infra & Security Engineer

Duna; Portugal; Teletrabalho; EUR 80 000 - 120 000; Tempo integral

Resumo da oferta

Duna is seeking a security‑focused platform engineer to own and harden the core platform on AWS and Kubernetes. You will implement least privilege, automated controls for SOC 2 and ISO 27001, and reduce toil by building self‑service environments.

You will enable safe AI agent operation with proper guardrails and incident learning. You will collaborate across teams in a remote‑first environment, balancing security with rapid engineering momentum and platform reliability.

Qualificações

• Deep, hands-on experience with AWS, Kubernetes, infrastructure as code, CI/CD and observability.
• Real security engineering skills: translate least privilege and auditability requirements into working systems.
• Comfort with enterprise IT aspects: certifications, customer security reviews, identity and device management.
• High agency in ambiguity and ability to turn vague problems into shipped plans.

Responsabilidades

• Own and harden our platform: AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response.
• Make security the default with least privilege, secrets management and tenant isolation built in.
• Turn SOC 2 and ISO 27001 commitments into automated controls and evidence.
• Turn recurring operational toil into self‑service systems and preview environments.
• Help Duna run AI agents safely with sandboxes, guardrails and human checkpoints.
• Take ownership of incidents and drive improvements after events.

Conhecimentos

AWS

Kubernetes

Infrastructure as Code

CI/CD

Observability

Security engineering

Least privilege

Auditability

Enterprise IT

Ambiguity tolerance

Decision making

AI curiosity

Ferramentas

Terraform

PostgreSQL

RabbitMQ

Node.js

TypeScript

Descrição da oferta de emprego

Duna is seeking a security‑focused platform engineer to own and harden the core platform on AWS and Kubernetes. You will implement least privilege, automated controls for SOC 2 and ISO 27001, and reduce toil by building self‑service environments.

You will enable safe AI agent operation with proper guardrails and incident learning. You will collaborate across teams in a remote‑first environment, balancing security with rapid engineering momentum and platform reliability.