(Senior) Infrastructure & Security Engineer

Stack

Responsibilities

• ▹Own and harden the platform: AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response
• ▹Make security the default, with least privilege, secrets management and tenant isolation built into the platform instead of bolted on later
• ▹Turn SOC 2 and ISO 27001 commitments into controls and evidence that are automated, not a yearly scramble
• ▹Turn recurring operational toil into self-service systems that engineers actually adopt, from preview environments to internal access
• ▹Help run AI agents in engineering safely, with the sandboxes, guardrails and human checkpoints that make it possible
• ▹Take calm ownership of incidents, and make sure the system gets better afterwards, not just the moment

Requirements

• ▹Deep, hands-on experience with AWS (or comparable), Kubernetes, infrastructure as code, CI/CD and observability
• ▹Real security engineering skills: turning least privilege and auditability requirements into working systems
• ▹Comfort with the enterprise IT side of a startup, from certifications and customer security reviews to identity and device management
• ▹High agency in ambiguity, turning a vague problem into a shipped plan
• ▹Pragmatic judgement about when to harden, when to simplify and when to leave something alone
• ▹Curiosity about what AI changes in how software is built and run

Nice to have

• ▹Experience with the platform's tech stack: AWS, Kubernetes, Terraform, Postgres, RabbitMQ, alongside a Node.js and TypeScript product stack built on event sourcing — not all prior experience required

Soft skills

What we offer

• ▹Remote-first, fast-moving team of builders
• ▹Open to candidates from a variety of backgrounds — encouraged to apply even without checking every box

About the company

Duna is redefining identity for the global economy, backed by investors including CapitalG and Index Ventures, along with founders and executives from Stripe, Adyen, Notion, Remote, Qonto, Framer, Anthropic, Mollie, OpenAI and Goldman Sachs.