Infrastructure & Security Engineer

<h4>Our Mission</h4><h5><strong>Money sitting idle is money lost. We're fixing that.</strong></h5><p>Founded in 2023 by<span> </span><a target="_blank" href="https://www.linkedin.com/in/antoine-michon/">Antoine</a><span> </span>and<span> </span><a target="_blank" href="https://www.linkedin.com/in/paul-adrien-hyppolite-71217ab4/">Paul-Adrien</a>, Spiko gives SMEs, non-profits, financial advisers and fintechs access to institutional-grade cash management, via app or API. We are building the full infrastructure: issuing, operating, and distributing the products ourselves.</p><p>Two years after launch, we serve thousands of organizations across Europe and process hundreds of millions of euros in flows every month.</p><p>Our ambition: become the world's leading treasury management infrastructure in a market worth trillions.</p><p>We are backed by Index Ventures, the CEO of Revolut, the founder of Kyriba, and the CTO of Wise.</p><p>Spiko runs on excellence, transparency, and straight talk.</p><p>We are looking for a Founding Infrastructure &amp; Security Engineer to join Spiko's 8-people engineering team. You will be the first person in the team fully dedicated to infrastructure, security, and reliability. Until now, these responsibilities have been shared across our full-stack engineers.</p><p></p><h4>Key Responsibilities</h4><p><strong>Cloud Infrastructure &amp; Operations</strong></p><ul><li><p>Manage and evolve our cloud infrastructure on AWS, GCP and Cloudflare using Terraform</p></li><li><p>Manage our deployed environments on Kubernetes (via Qovery)</p></li><li><p>Improve reliability, observability, and performance of our systems</p></li><li><p>Define infrastructure standards and deployment best practices</p></li></ul><p><strong>Security</strong></p><ul><li><p>Set up continuous security scanning and automated vulnerability detection</p></li><li><p>Evaluate and deploy AI-powered pentesting tools</p></li><li><p>Organize and manage external security audits</p></li><li><p>Enforce application and cloud security best practices</p></li></ul><p><strong>Corporate IT &amp; Compliance</strong></p><ul><li><p>Manage VPN, SSO, MFA, and access control policies</p></li><li><p>Handle employee onboarding/offboarding from a systems access perspective</p></li><li><p>Drive ISO 27001 compliance (policies, controls, evidence collection)</p></li><li><p>Respond to internal security incidents (stolen devices, phishing, suspicious access)</p></li></ul><h5>Our stack</h5><ul><li><p>Cloud: <a target="_blank" href="https://aws.amazon.com/">AWS</a>, GCP, Cloudflare (for DNS)</p></li><li><p>Infrastructure as Code: <a target="_blank" href="https://www.terraform.io/">Terraform</a></p></li><li><p>Orchestration &amp; Deployment: <a target="_blank" href="https://kubernetes.io/">Kubernetes</a>, <a target="_blank" href="https://www.docker.com/">Docker</a>, <a target="_blank" href="https://www.qovery.com/">Qovery</a></p></li><li><p>Databases: <a target="_blank" href="https://www.postgresql.org/">PostgreSQL</a></p></li><li><p>Observability: <a target="_blank" href="https://www.datadoghq.com/">Datadog</a> (logs, traces, metrics, RUM)</p></li><li><p>Identity &amp; Access: <a target="_blank" href="https://www.ory.sh/">Ory</a> (Kratos, Hydra, Oathkeeper)</p></li><li><p>CI/CD: GitHub Actions</p></li><li><p>Application stack: <a target="_blank" href="https://www.typescriptlang.org/">TypeScript</a>, <a target="_blank" href="https://nx.dev/">NX</a>, <a target="_blank" href="https://effect.website/">Effect</a>, <a target="_blank" href="https://react.dev/">React</a></p></li></ul><h4>Who we're looking for</h4><h5><strong>Requirements (must haves):</strong></h5><ul><li><p>5+ years of experience in infrastructure, DevOps, or security engineering roles</p></li><li><p>Strong hands-on experience with AWS (and/or GCP), Terraform, and Kubernetes</p></li><li><p>Solid understanding of application security, network security, and cloud security best practices</p></li><li><p>Experience with security audit processes, vulnerability management, or compliance frameworks (ISO 27001, SOC 2, or similar)</p></li><li><p>Comfortable working autonomously and defining your own roadmap — you'll be the first dedicated person in this area</p></li><li><p>Comfortable working in an English-speaking environment</p></li><li><p>Curious, pragmatic, and eager to learn</p></li></ul><h5><strong>Nice to have:</strong></h5><ul><li><p>Experience in fintech, capital markets, or other highly regulated environments</p></li><li><p>Familiarity with CI/CD security tooling (SAST, DAST, dependency scanning, container scanning)</p></li><li><p>Experience with automated pentesting tools or AI-driven security testing</p></li><li><p>Knowledge of blockchain infrastructure or Web3 security</p></li><li><p>Experience leading or contributing to ISO 27001 certification</p></li></ul><h4><strong>What we offer</strong></h4><ul><li><p>💰<strong>Compensation</strong>: €75k - €95k + Stock Options</p></li><li><p>📍<span> </span><strong>Office</strong>: in the heart of Paris</p></li><li><p>🏡<span> </span><strong>Remote work</strong>: up to 2 days per week and one full remote week per month</p></li><li><p>💻<span> </span><strong>The best tech for your job</strong>: latest-generation laptops and industry-leading software</p></li><li><p>🏥<span> </span><strong>Health insurance</strong>: 100% covered by Spiko</p></li><li><p>💳<span> </span><strong>Monthly Budget</strong><span> </span>to cover different perks of choice</p></li><li><p>🚇<span> </span><strong>Transport</strong>: 50% of public transport pass covered or the Forfait Mobilités Durables (FMD)</p></li><li><p>👥<span> </span><strong>Referral Bonus</strong></p></li><li><p>🎊<span> </span><strong>Social life</strong>: regular afterworks and biannual offsites</p></li></ul><h4>Our Hiring process</h4><ol><li><p>Screening Interview - 30 min screening call with Talent Acquisition</p></li><li><p>Hiring Manager Interview - 30 min with Nicolas, Tech Lead</p></li><li><p>45 min technical interview focused on infrastructure &amp; security with one engineer (remote)</p></li><li><p>2h hands-on technical session with two engineers (infrastructure design, security scenario) (in the office)</p></li><li><p>Final Interviews with the Founders</p></li><li><p>Reference Check: we'll reach out to your references to gather further insights</p></li><li><p>Offer</p></li></ol><p></p><p><em>If something here doesn't match your résumé perfectly but you believe you'd thrive in this role, apply anyway. Tell us why.</em></p>