DevSecOps Engineer – Remote (EMEA)

About the role

We are looking for a DevSecOps Engineer to lead the evolution of security and infrastructure for a fast‑growing fintech platform serving the travel and airline industry. This remote, EMEA‑based role is hands‑on and highly impactful, focusing on secure cloud architecture, PCI DSS implementation, and embedding security best practices across the engineering organization.

Key responsibilities

• Lead implementation of PCI DSS controls across infrastructure and application layers.
• Design and secure AWS environments using best practices for IAM, networking, and encryption.
• Own Infrastructure as Code (Terraform, CDK, Pulumi) and improve deployment reliability.
• Integrate security into CI/CD pipelines and engineering workflows.
• Enhance platform scalability, observability, reliability, and fault tolerance.
• Manage security tooling, monitoring, logging, and incident‑readiness processes.
• Partner with auditors and internal stakeholders on compliance initiatives.
• Define cloud security and infrastructure standards for the engineering team.
• Mentor engineers on secure infrastructure and development practices.
• Contribute to long‑term platform architecture and operational strategy.

Required profile

• 4+ years of experience in DevOps, Platform or Infrastructure Engineering.
• Strong hands‑on experience with AWS in production environments.
• Proven experience with PCI DSS, SOC 2, ISO 27001 or similar compliance frameworks.
• Experience with Infrastructure as Code tools such as Terraform, CDK or Pulumi.
• Deep understanding of IAM, least‑privilege design, VPCs, subnets, network segmentation, encryption and secrets management.
• Solid background building and operating secure, scalable cloud systems.
• Strong knowledge of DevSecOps principles and secure CI/CD workflows.
• Excellent communication skills and ability to collaborate with technical and non‑technical teams.

Required skills

• AWS
• PCI DSS
• SOC 2
• ISO 27001
• Terraform
• CDK
• Pulumi
• IAM
• VPC networking
• Encryption & secrets management
• CI/CD pipelines
• DevSecOps