DevSecOps Engineer – Remote (EMEA)

About the role

We are looking for a DevSecOps Engineer to lead the evolution of security and infrastructure for a fast‑growing fintech platform that powers payment orchestration in the travel and airline industry. This remote, EMEA‑based role is highly impactful, combining hands‑on cloud architecture design with compliance implementation and security best‑practice adoption.

Key responsibilities

• Lead implementation of PCI DSS controls across infrastructure and application layers.
• Design and secure AWS infrastructure using best practices for IAM, networking, and encryption.
• Own Infrastructure as Code (Terraform, CDK, Pulumi) and improve deployment reliability across environments.
• Integrate security into CI/CD pipelines and engineering workflows.
• Improve platform scalability, observability, reliability, and fault tolerance.
• Manage security tooling, monitoring, logging, and incident‑readiness processes.
• Partner with auditors and internal stakeholders on compliance initiatives.
• Define cloud security and infrastructure best practices for the engineering team.
• Mentor engineers on secure infrastructure and development practices.
• Contribute to long‑term platform architecture and operational strategy.

Required profile

• 4+ years of experience in DevOps, Platform Engineering, Infrastructure Engineering, or related backend infrastructure roles.
• Strong hands‑on AWS experience in production environments.
• Proven experience implementing or working with PCI DSS, SOC 2, ISO 27001, or similar compliance frameworks.
• Experience with Infrastructure as Code tools such as Terraform, CDK, Pulumi, or similar technologies.
• Deep understanding of IAM and least‑privilege access design.
• Solid knowledge of network security concepts (VPCs, subnets, isolation, segmentation).
• Expertise in encryption, secrets management, and secure infrastructure design.
• Experience building and operating secure, scalable cloud systems.
• Strong understanding of DevSecOps principles and secure CI/CD workflows.
• Ability to make pragmatic infrastructure and security decisions in fast‑moving environments.
• Excellent communication skills and ability to collaborate across technical and non‑technical teams.

Required skills

• AWS
• PCI DSS
• SOC 2
• ISO 27001
• Terraform
• CDK
• Pulumi
• IAM
• VPC networking
• Encryption
• Secrets management
• CI/CD pipelines