Platform Security Engineer (AWS/Kubernetes)

Location: Remote in Amsterdam or Europe

Company

hirify.global is building infrastructure for identity products serving the global economy, with a focus on reliability, security, and auditability for enterprise customers.

What you will do

• Own and harden the AWS and Kubernetes platform, including infrastructure as code, CI/CD, observability, Postgres, and incident response.
• Build security into the platform through least privilege, secrets management, tenant isolation, and auditable controls.
• Automate SOC 2 and ISO 27001 controls and evidence collection.
• Replace recurring operational toil with self-service systems such as preview environments and internal access workflows.
• Design sandboxes, guardrails, and human checkpoints for safe use of AI agents in engineering.
• Lead incident response and turn post-incident improvements into durable platform changes.

Requirements

• Deep hands-on experience with AWS or a comparable cloud platform, Kubernetes, infrastructure as code, CI/CD, and observability.
• Practical security engineering experience translating least-privilege and auditability requirements into working systems.
• Comfort with enterprise IT responsibilities, including certifications, customer security reviews, identity management, and device management.
• Ability to turn ambiguous problems into shipped plans and apply pragmatic technical judgment.
• Experience with every listed technology is not required; depth of expertise and ability to learn are valued.

Nice to have

• Experience with Terraform, Postgres, RabbitMQ, Node, TypeScript, or event sourcing.
• Curiosity about how AI changes software development and operations.

Culture & Benefits

• Remote-first environment for a fast-moving team of builders.
• Culture focused on transparency, ambition, curiosity, authenticity, and kindness.
• Opportunity to work on enterprise-grade reliability, security, and auditability challenges.
• Applications are welcomed from people with varied backgrounds, including candidates who do not meet every listed requirement.