DevSecOps / Infrastructure Engineer – Kubernetes, Linux, ISO 27001

apeirum

DevSecOps / Infrastructure Engineer at apeirum managing self-hosted security-first infrastructure. Working with Kubernetes, Linux, and ISO 27001 in a remote-first environment in CET hours.

Posted 7/1/2026full-timeRemote • 🇪🇸 SpainMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in administering and hardening Linux servers, managing Kubernetes clusters, and implementing Infrastructure-as-Code practices. Proficient in CI/CD pipeline management, observability tools, and security compliance with a focus on operational excellence.

Highest-signal resume keywords

Kubernetes Cluster ManagementLinux AdministrationInfrastructure-as-Code (IaC)CI/CD Pipeline ManagementISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Linux Server AdministrationKubernetesDockerInfrastructure-as-CodeHelmKustomizeAnsibleGitLab CI/CDElasticBash Scripting

Soft Skills

Strong Documentation HabitsSecurity-First Mindset

Tools & Technologies

GitLabElasticMicrosoft 365Entra ID

Industry Keywords

DevSecOpsSelf-Hosted EnvironmentsObservabilityBackup/Restore PracticesISO 27001ISMS

Tech Stack

Tools & technologies

AnsibleCloudDNSDockerKubernetesLinuxNode.js

About the role

Key responsibilities & impact

Administer and harden self-hosted Linux servers
Design, set up and operate self-managed, multi-node Kubernetes clusters (lifecycle, upgrades, networking, storage, ingress, RBAC, high availability)
Manage the Docker / container lifecycle across environments
Build and maintain Infrastructure-as-Code and configuration management (Helm, Kustomize, Ansible)
Own CI/CD pipelines with integrated security scanning (GitLab CI/CD)
Run the monitoring, logging and observability stack (Elastic)
Design and operate encrypted backups: retention, rollover and restore validation
Deliver controlled, repeatable system updates and upgrades
Automate and script infrastructure (Bash)
Lead incident response and keep operational documentation current
Manage DNS and domains

Requirements

What you’ll need

5+ years of hands-on infrastructure / DevSecOps experience in production, self-hosted environments (not purely managed cloud)
Deep, operational Kubernetes knowledge — you've run clusters, not just deployed to them
Strong Linux administration and hardening background
Solid command of IaC and configuration management (Helm, Kustomize, Ansible) and CI/CD (GitLab)
Experience with observability (Elastic or comparable) and robust backup/restore practices
Working knowledge of Microsoft 365 / Entra ID administration and security
Practical familiarity with ISO 27001 / ISMS — controls, evidence and audits, not just theory
A security-first mindset, strong documentation habits, and the discipline to keep changes controlled and repeatable
Fluent English; German is a plus
Based in Spain or Portugal, able to work CET hours

Benefits

Comp & perks

Remote-first across Spain and Portugal, on CET — real collaboration, not async lag
Senior-only culture — work alongside experienced engineers, no juniors to manage
AI-leveraged engineering — modern AI tooling so one senior does the work of several
Flexible engagement — permanent employment (Spain) or freelance/contract (Spain or Portugal), your call
End-to-end ownership of the stack, with the autonomy that comes with it
Variety across infrastructure, cloud security and compliance work for interesting European clients