Skip to main content
LocalStack

Senior DevOps Engineer

RemoteSpain only
Published
Role
DevOps
Experience
Senior
Employment
Full-time
Company size
Startup
PLN 202k–PLN 330k/yr
Check eligibility

Open to ES only. Set where you work from to check your eligibility.

No BS summary

Senior DevOps Engineer based in Spain. Requires deep AWS org-level experience (Organizations, Control Tower, IAM/SCPs, Security Hub/GuardDuty, VPC), strong IaC practice (Terraform/OpenTofu, CDK, or Pulumi) and experience with SOC 2 Type II / ISO 27001 compliance. Must be experienced with identity/access (SSO/MFA/IdP), cloud cost management/FinOps and scripting (Bash, Python or Go).

Core skills

Terraform/OpenTofu/CDK/PulumiAWS

Required skills

AWS OrganizationsAWS Control TowerIAMSCPsAWS Security HubAmazon GuardDutyVPCSSOMFAIdPBashPythonGo

Optional skills

Azure

What you'll do

  • Own the internal cloud infrastructure and serve as the primary point of contact for cloud operations and infrastructure requests.
  • Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied.
  • Support and maintain compliance with SOC 2 Type II and ISO 27001, ensuring audit evidence is prepared continuously rather than only during audit periods.
  • Operate and improve our identity and access management, including SSO, MFA, permissions, and joiner/mover/leaver processes.
  • Maintain and monitor self-hosted internal services, ensuring they meet agreed service levels and that vulnerabilities are tracked and resolved efficiently.

What they require

  • Deep AWS experience at org level: Organizations, Control Tower, multi-account landing zones, IAM/SCPs, Security Hub/GuardDuty, VPC and multi-AZ networking
  • IaC as the only way infrastructure gets created - module design, state management, review and promotion between environments. Tool-agnostic, but real depth in at least one (Terraform/OpenTofu, CDK, Pulumi)
  • Understands how to evolve existing systems toward compliance - can look at a running estate and work out what has to change, in what order, to satisfy SOC 2 / ISO 27001
  • Internal workforce identity and access: IdP-backed SSO/MFA, centralised access management, automated joiner/mover/leaver
  • Cloud cost management / FinOps fundamentals; observability and alerting design plus on-call for a distributed team

LocalStack is a local cloud development platform that provides secure local sandboxes simulating cloud environments, helping software teams ship reliable cloud applications faster and cheaper.

🇨🇭 SwitzerlandDeveloper ToolsStartuplocalstack.cloud/
PLN 202k–PLN 330k/yr