Zentso

Security Engineer

• Manage and maintain global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions.
• Ensure availability, performance, and scalability of the CloudToolz platform, which is revenue-critical and must meet defined SLAs.
• Support the CTO in planning and executing deployments of new CloudToolz releases, an ASP.NET Core-based platform integrating with Dynamics, iMIS, Salesforce, and native CRM and CMS capabilities.
• Lead the migration of CloudToolz workloads toward a Kubernetes-based container orchestration model, defining the target architecture, migration sequencing, and rollout approach in collaboration with the CTO.
• Manage and evolve Kubernetes cluster operations including deployments, scaling, resource management, network policies, and RBAC.
• Build and maintain an observability stack using Grafana OSS, including dashboards, alerting, and integration with metrics, logs, and traces from application and infrastructure layers.
• Manage DNS, CDN, WAF, and DDoS protection through Cloudflare.
• Monitor system performance, identify and resolve bottlenecks, and lead incident response and recovery.
• Maintain up-to-date documentation, runbooks, configuration standards, and disaster recovery procedures.
• Lead IT security operations including identity and access management, endpoint protection, and vulnerability management.
• Administer and enforce policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4.
• Develop and enforce data protection and compliance policies aligned to GDPR and ISO 27001 frameworks.
• Conduct and coordinate security awareness training, phishing simulations, and incident response exercises.
• Monitor for threats and manage response, escalation, and remediation processes.
• Administer and optimise Microsoft 365 across the organisation, including Exchange Online, SharePoint, Teams, and Entra ID.
• Manage Salesforce administration within scope, in coordination with the product team.
• Own configuration and policy management for endpoint security tools and password management.
• Collaborate with the CTO on infrastructure scaling strategy, architecture decisions, and technology selection, with a particular focus on the containerisation roadmap.
• Drive adoption of infrastructure-as-code practices to support repeatable, auditable deployments across environments.
• Drive automation of routine operations using PowerShell, scripting, and monitoring tooling.
• Provide input into sprint planning and release coordination with the Product Owner for environment-level requirements.
• Participate in on-call rotation to ensure platform availability across time zones.

IT Infrastructure and Security Lead