DevSecOps Engineer – Remote (EMEA)

About the role

We are looking for a Security & Infrastructure Engineer to lead the evolution of our security posture and cloud foundation. The role is fully remote within EMEA time zones and focuses on designing secure AWS architectures, implementing PCI DSS controls, and embedding security best practices across the engineering organization.

Key responsibilities

• Lead implementation of PCI DSS controls across infrastructure and application layers.
• Design and secure AWS infrastructure using best‑practice IAM, networking, and encryption.
• Own Infrastructure as Code (Terraform, CDK, Pulumi) and improve deployment reliability.
• Integrate security into CI/CD pipelines and engineering workflows.
• Improve platform scalability, observability, reliability, and fault tolerance.
• Manage security tooling, monitoring, logging, and incident‑readiness processes.
• Partner with auditors and internal stakeholders on compliance initiatives.
• Define cloud security and infrastructure best practices for the engineering team.
• Mentor engineers on secure infrastructure and development practices.
• Contribute to long‑term platform architecture and operational strategy.

Required profile

• 4+ years of experience in DevOps, Platform or Infrastructure Engineering.
• Strong hands‑on experience with AWS in production environments.
• Proven experience with PCI DSS, SOC 2, ISO 27001 or similar compliance frameworks.
• Experience with Infrastructure as Code tools such as Terraform, CDK or Pulumi.
• Deep understanding of IAM, least‑privilege design, VPC networking, encryption and secrets management.
• Solid knowledge of DevSecOps principles and secure CI/CD workflows.
• Ability to make pragmatic infrastructure and security decisions in fast‑moving environments.
• Excellent communication skills and ability to collaborate with technical and non‑technical teams.

Required skills

• AWS
• PCI DSS
• SOC 2
• ISO 27001
• Terraform
• CDK
• Pulumi
• IAM
• VPC networking
• Encryption
• Secrets management
• CI/CD pipelines
• Security tooling
• Monitoring and logging
• Incident response