(Senior) Infrastructure & Security Engineer

The role

You will own and harden the platform including AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response. You will implement security defaults, automate SOC 2 and ISO 27001 controls, and build self-service systems to reduce operational toil.

What you will do

• Own and harden the platform including AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability and incident response
• Make security the default with least privilege, secrets management and tenant isolation built into the platform
• Turn SOC 2 and ISO 27001 commitments into automated controls and evidence
• Turn recurring operational toil into self-service systems
• Help Duna run AI agents in engineering safely with sandboxes, guardrails and human checkpoints
• Take calm ownership of incidents and ensure the system improves afterwards

Required qualifications

• Deep, hands-on experience with AWS (or comparable), Kubernetes, infrastructure as code, CI/CD and observability
• Real security engineering skills to turn least privilege and auditability requirements into working systems
• Comfort with the enterprise IT side of a startup, from certifications and customer security reviews to identity and device management
• High agency in ambiguity, turning a vague problem into a shipped plan
• Pragmatic judgement about when to harden, when to simplify and when to leave something alone
• Curiosity about what AI changes in how we build and run software

About the company

Duna's mission is to redefine identity for the global economy. They are a remote-first, fast-moving team of builders.