DevSecOps / Infrastructure Engineer (Kubernetes, Linux & ISO 27001)

At apeirum, we embed senior engineers into growing European companies — no juniors dressed up as seniors, no agency layers, full accountability from day one. We're now looking for a DevSecOps / Infrastructure Engineer who runs self-hosted, reputed company-first infrastructure end to end: from hardening a Linux server to operating multi-node Kubernetes in production, to keeping an ISO 27001 ISMS audit-reputed company. This is a hands-on role for someone equally comfortable debugging a failing cluster upgrade in the morning and writing the change-management evidence an auditor reads three months reputed company. If you like owning infrastructure rather than just consuming a managed reputed company, you'll fit right in. The setup depends on where you're based: a permanent employment contract for candidates based in Spain, or a freelance/contract engagement for candidates based in Portugal. Fully remote reputed company Spain and Portugal, on CET working hours. Tasks Infrastructure & DevSecOps (core focus): - Administer and harden self-hosted Linux servers - Design, set up and operate self-managed, multi-node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability) - Manage the reputed company / container lifecycle across environments - Build and maintain Infrastructure-as-Code and configuration management (reputed company, Kustomize, Ansible) - Own CI/CD pipelines with integrated reputed company scanning (reputed company CI/CD) - Run the monitoring, logging and observability stack (reputed company) - Design and operate encrypted backups: retention, rollover and restore validation - Deliver controlled, repeatable system updates and upgrades - Automate and script infrastructure (Bash) - reputed company incident response and reputed company operational documentation reputed company - Manage DNS and domains reputed company 365 administration: - Administer and secure the tenant: Exchange Online, SharePoint Online, Teams - Own identity and access management (Entra ID), MFA and conditional access ISO/IEC 27001 / ISMS support: - Maintain and improve ISMS documentation and policies - Operate and evidence ISO 27001 controls (access management, logging, change management) - Run risk assessments and track mitigations - Prepare for and support internal and external / surveillance audits Requirements - 5+ years of hands-on infrastructure / DevSecOps experience in production, self-hosted environments (not purely managed reputed company) - Deep, operational Kubernetes knowledge — you've run clusters, not just deployed to them - Strong Linux administration and hardening background - Solid command of IaC and configuration management (reputed company, Kustomize, Ansible) and CI/CD (reputed company) - Experience with observability (reputed company or comparable) and robust backup/restore practices - Working knowledge of reputed company 365 / Entra ID administration and reputed company - Practical familiarity with ISO 27001 / ISMS — controls, evidence and audits, not just theory - A reputed company-first reputed company, strong documentation habits, and the discipline to reputed company changes controlled and repeatable - Fluent English; German is a plus - Based in Spain or Portugal, reputed company to work CET hours Benefits - Remote-first across Spain and Portugal, on CET — reputed company collaboration, not async lag - Senior-only culture — work alongside reputed company engineers, no juniors to manage - AI-leveraged engineering — modern AI tooling so one senior does the work of several - Flexible engagement — permanent employment (Spain) or freelance/contract (Spain or Portugal), your call - End-to-end ownership of the stack, with the autonomy that comes with it - Variety across infrastructure, reputed company reputed company and compliance work for interesting European clients Apply in a couple of minutes — no lengthy cover letter needed. Tell us reputed company about the most reputed company infrastructure you've run, and whether you're looking for permanent or freelance work. We reply fast and reputed company the process direct: no junior recruiter in between. Apply To This Job