Infrastructure and security engineer for SaaS

Zentso; United States; Remote; USD 61,000 - 84,000; Full time

Benefits offered by this job

Remote-first

Flexible hours

Job summary

Zentso приглашает к работе инженера IT-инфраструктуры для поддержки глобальной облачной платформы CloudToolz. Вы будете управлять Windows Server, базами данных, Kubernetes, Grafana и заниматься безопасностью и соответствием GDPR/ISO 27001.

Работа удалённая с гибким графиком, в распределенной команде по нескольким часовым поясам. Ожидается 2+ года опыта и знание основных инструментов инфраструктуры.

Qualifications

• Не менее 2 лет опыта в IT-инфраструктуре/DevOps.
• Опыт работы с Windows Server 2022, SQL Server, MongoDB и Redis.
• Практический опыт Cloudflare (DNS, WAF, CDN).
• Опыт администрирования Microsoft 365: Entra ID, Exchange Online, SharePoint.
• Знание Kubernetes: развертывание, операции кластера, RBAC.
• Базовые знания сетевых основ (firewall, VPN, DNS).
• Умение писать скрипты (PowerShell, shell) и программировать на одном языке (Python, Go, C#, JS/TS).
• Готовность к обучению и работе в распределенной команде по нескольким часовым поясам.

Responsibilities

• Управление глобальной инфраструктурой: Windows Server 2022, SQL Server, MongoDB, Redis, Cloudflare.
• Поддержка развертываний CloudToolz, интеграции с Dynamics, iMIS, Salesforce.
• Участие в миграции к Kubernetes: развёртывания, масштабирование, сетевые политики, RBAC.
• Создание и сопровождение стека Grafana OSS: дашборды, алерты, сбор метрик/логов/трейсов.
• Администрирование DNS, CDN, WAF, DDoS через Cloudflare; мониторинг производительности; участие в инцидент-реакции.
• Документация, runbooks, DR-процедуры; скрипты и утилиты автоматизации.
• Сопровождение IAM, защиты конечных точек, управления уязвимостями.
• Вклад в политику защиты данных в рамках GDPR/ISO 27001; обучение сотрудников.
• Администрирование Microsoft 365 и Salesforce; совместная работа над архитектурой и CI/CD.
• Поддержка Terraform/Pulumi/Ansible и GitOps, Terraform exposure.

Skills

IT-инфраструктура

Облачные операции

Сети и безопасность

Скрипты автоматизации

Коммуникация в команде

Tools

Windows Server 2022

SQL Server

MongoDB

Redis

Cloudflare

Kubernetes

PowerShell

Python

Job description

Описание:

Zentso builds and operates CloudToolz, a revenue-critical SaaS platform layered on top of iMIS RiSE association management software, serving clients across the UK, Europe, United States, and Asia Pacific. The platform encompasses workflow automation, form building, CRM, CMS, and payment processing capabilities delivered to organisations in multiple sectors.

Задачи:

Help manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions, supporting the availability, performance, and scalability of the revenue-critical CloudToolz platform. Support deployments of new CloudToolz releases (ASP.NET Core, integrating with Dynamics, iMIS, Salesforce, and native CRM/CMS) and contribute to the Kubernetes migration, including cluster operations such as deployments, scaling, network policies, and RBAC. Help build and maintain a Grafana OSS observability stack — dashboards, alerting, and integration with metrics, logs, and traces. Assist with DNS, CDN, WAF, and DDoS protection via Cloudflare; monitor system performance and participate in incident response and recovery. Maintain documentation, runbooks, and disaster recovery procedures. Write shell scripts and small infrastructure-related applications (automation tools, monitoring utilities, internal dashboards) in coordination with the Infrastructure Lead. Support identity and access management, endpoint protection, and vulnerability management. Help administer policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4. Contribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring/response. Support Microsoft 365 administration (Exchange Online, SharePoint, Teams, Entra ID) and Salesforce administration within scope. Share responsibility for endpoint security and password management configuration. Provide input on infrastructure scaling, architecture decisions, and the containerisation roadmap. Support infrastructure-as-code adoption and automate routine operations using PowerShell, shell scripting, and other languages. Contribute to sprint planning for environment-level requirements and participate in on-call rotation.

Требования:

• 2+ years of experience in IT infrastructure, cloud operations, systems administration, or DevOps.
• Hands-on experience with Windows Server 2022, SQL Server, MongoDB, and Redis in operational contexts.
• Practical Cloudflare experience (DNS, WAF, CDN, security features).
• Working proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint.
• Hands-on Kubernetes experience: workload deployment, basic cluster operations, networking (ingress, network policies), and RBAC.
• Solid understanding of networking fundamentals (firewalls, VPNs, DNS, access control).
• Working knowledge of GDPR and experience supporting compliance controls.
• Ability to write shell scripts and program in at least one modern language (e.g. Python, Go, C#, JavaScript/TypeScript), with willingness to build small infrastructure-related applications and tools.
• Strong communication skills and ability to work independently within a distributed, multi-time-zone team.
• Будет плюсом: Experience with Grafana OSS, Prometheus, and Loki; Familiarity with Docker, containerd, Helm, and kubectl; Certifications such as MCSA, CompTIA Security+, CKA, or equivalent; Familiarity with ISO 27001 audit/certification processes; PowerShell scripting for automation and reporting; Exposure to Terraform, Pulumi, Ansible, CI/CD, or GitOps; Salesforce administration experience

Условия:

• This is a full-time, permanent position based in Berlin, Germany, offered on a remote-first basis.
• The CloudToolz platform operates continuously across multiple regions; the role includes on-call and out-of-hours escalation responsibilities.
• €55,000 – €75,000 per year Discretionary, based on individual and company performance.
• Employer contribution in line with local requirements.
• Remote-first; flexible hours with availability for global coordination 6 months.
• Compensation is commensurate with demonstrable experience and the scope of the role.
• The range reflects a small-business context while remaining competitive for the Berlin IT market for this level of responsibility.