DevSecOps / Infrastructure Engineer – Kubernetes, Linux, ISO 27001

At apeirum, we embed senior engineers into growing European companies — no juniors dressed up as seniors, no agency layers, full accountability from day one. We're now looking for a DevSecOps / Infrastructure Engineer who runs self-hosted, security‑first infrastructure end to end: from hardening a Linux server to operating multi‑node Kubernetes in production, to keeping an ISO27001 ISMS audit‑ready.

YOUR TASKS

Infrastructure & DevSecOps (core focus)

• Administer and harden self‑hosted Linux servers
• Design, set up and operate self‑managed, multi‑node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability)
• Manage the Docker / container lifecycle across environments
• Build and maintain Infrastructure‑as‑Code and configuration management (Helm, Kustomize, Ansible)
• Own CI/CD pipelines with integrated security scanning (GitLab CI/CD)
• Run the monitoring, logging and observability stack (Elastic)
• Design and operate encrypted backups: retention, rollover and restore validation
• Deliver controlled, repeatable system updates and upgrades
• Automate and script infrastructure (Bash)
• Lead incident response and keep operational documentation current
• Manage DNS and domains

Microsoft 365 administration

• Administer and secure the tenant: Exchange Online, SharePoint Online, Teams
• Own identity and access management (EntraID), MFA and conditional access

ISO/IEC27001 / ISMS support

• Maintain and improve ISMS documentation and policies
• Operate and evidence ISO27001 controls (access management, logging, change management)
• Run risk assessments and track mitigations
• Prepare for and support internal and external / surveillance audits

THIS IS WHAT YOU BRING

• 5years of hands‑on infrastructure / DevSecOps experience in production, self‑hosted environments (not purely managed cloud)
• Deep, operational Kubernetes knowledge — you've run clusters, not just deployed to them
• Strong Linux administration and hardening background
• Solid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)
• Experience with observability (Elastic or comparable) and robust backup/restore practices
• Working knowledge of Microsoft365 / EntraID administration and security
• Practical familiarity with ISO27001 / ISMS — controls, evidence and audits, not just theory
• A security‑first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatable
• Fluent English; German is a plus
• Based in Spain or Portugal, able to work CET hours