(Senior) Infrastructure & Security Engineer

Duna; Portugal; Remote; EUR 80,000 - 120,000; Full time

Job summary

Duna is seeking a security‑focused platform engineer to own and harden the core platform on AWS and Kubernetes. You will implement least privilege, automated controls for SOC 2 and ISO 27001, and reduce toil by building self‑service environments.

You will enable safe AI agent operation with proper guardrails and incident learning. You will collaborate across teams in a remote‑first environment, balancing security with rapid engineering momentum and platform reliability.

Qualifications

• Deep, hands-on experience with AWS, Kubernetes, infrastructure as code, CI/CD and observability.
• Real security engineering skills: translate least privilege and auditability requirements into working systems.
• Comfort with enterprise IT aspects: certifications, customer security reviews, identity and device management.
• High agency in ambiguity and ability to turn vague problems into shipped plans.

Responsibilities

• Own and harden our platform: AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response.
• Make security the default with least privilege, secrets management and tenant isolation built in.
• Turn SOC 2 and ISO 27001 commitments into automated controls and evidence.
• Turn recurring operational toil into self‑service systems and preview environments.
• Help Duna run AI agents safely with sandboxes, guardrails and human checkpoints.
• Take ownership of incidents and drive improvements after events.

Skills

AWS

Kubernetes

Infrastructure as Code

CI/CD

Observability

Security engineering

Least privilege

Auditability

Enterprise IT

Ambiguity tolerance

Decision making

AI curiosity

Tools

Terraform

PostgreSQL

RabbitMQ

Node.js

TypeScript

Job description

Listed on CyberJobs.cc, a job board for cybersecurity jobs from the team behind AITraining.jobs.

At Duna, we see the company as the second product we're building and are continually working to create a transparent, ambitious culture. We want this to be the place where you do your best work.

Our mission is to redefine identity for the global economy. We're backed by world‑class investors including CapitalG and Index Ventures, as well as founders and executives from companies like Stripe, Adyen, Notion, Remote, Qonto, Framer, Anthropic, Mollie, OpenAI and Goldman Sachs.

Duna's infrastructure is part of the product. Enterprise customers buy our reliability, security posture and auditability, not just our features.

Since your role with us will rarely fit a job description, we only wrote a crisp overview.

What You'll Be Doing In This Role

• Own and harden our platform: AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response
• Make security the default, with least privilege, secrets management and tenant isolation built into the platform instead of bolted on later
• Turn our SOC 2 and ISO 27001 commitments into controls and evidence that are automated, not a yearly scramble
• Turn recurring operational toil into self‑service systems that engineers actually adopt, from preview environments to internal access
• Help Duna run AI agents in engineering safely, with the sandboxes, guardrails and human checkpoints that make it possible
• Take calm ownership of incidents, and make sure the system gets better afterwards, not just the moment

What We're Looking For

• Deep, hands‑on experience with AWS (or comparable), Kubernetes, infrastructure as code, CI/CD and observability
• Real security engineering skills: you turn least privilege and auditability requirements into working systems
• Comfort with the enterprise IT side of a startup, from certifications and customer security reviews to identity and device management
• High agency in ambiguity, turning a vague problem into a shipped plan
• Pragmatic judgement about when to harden, when to simplify and when to leave something alone
• Curiosity about what AI changes in how we build and run software

Our platform runs on AWS and Kubernetes with Terraform, Postgres and RabbitMQ, alongside a Node.js and TypeScript product stack built on event sourcing. You will not have used all of it before. We care more about the depth you bring and how you pick up the rest.

A final note before you apply: please read through our website in detail. You'll find the fundamentals there: what we believe in, how we work, and why we're building this company.

We're a remote-first, fast-moving team of builders looking for exceptional people who love to create, build, and ship. Beyond passion and grit, we highly value curiosity, authenticity and kindness.

If this sounds like you, we'd love to hear from you!

PS. We are looking to hire passionate people from a variety of backgrounds. So even if you don't check all the boxes, we welcome your application!