SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Atlys is building an AI-first platform to remove friction from global travel, having processed visas for 1M+ travelers across 127 countries. The company handles highly sensitive data including passports, financial documents, photographs and identity records flowing between travelers, partners and government systems.
As Platform & Security Engineer, you will be the second engineer on the Infra & Security team with real ownership from day one. You'll take on large parts of the infrastructure and security roadmap rather than a narrow slice.
Key responsibilities:
- Own cloud infrastructure: run and improve Kubernetes platform on GCP (with some AWS workloads), implement multi-stage CI/CD, container promotion and GitOps for repeatable, fast deployments
- Ensure platform observability and reliability: consolidate logs, metrics and traces, set up trusted alerting, participate in on-call and incident response, monitor cloud costs
- Manage data layer: optimize database performance, handle backups and access automation, manage caching and messaging infrastructure
- Enforce access controls: implement least-privilege IAM across cloud, Kubernetes and GitHub, run zero-trust access to internal services, manage SSO and offboarding
- Protect sensitive data: design and harden access controls and audit logging for PII (passports, financial documents, identity records)
- Build security into shipping: add SAST, DAST, dependency and container scanning, SBOMs to CI/CD, run vulnerability management, coordinate pentests, identify and validate application security issues, drive fixes with service owners
- Secure AI products: threat-model and harden AI agents and assistants, address prompt injection, tool and OAuth scope permissions, data leakage between users, secrets handling
The role emphasizes treating infrastructure and security as products, designing systems secure by default, automating toil, and providing engineers with a paved road to ship safely. You'll work with AI tools and have room to learn new areas.
REQUIREMENTS:
- 4+ years of experience in infrastructure, DevOps, or security engineering, ideally at a product company handling sensitive or regulated data
- Strong fundamentals in Linux, networking (DNS, TLS, HTTP, load balancing), containers and Kubernetes, and at least one public cloud
- Understanding of security fundamentals (identity and access, encryption, secrets management, OWASP Top 10) applied in production
- Strong in either infrastructure or security with genuine desire to get good at the other
- End-to-end ownership mindset: make pragmatic trade-offs between security, speed and developer experience, explain risk clearly, bring engineers along rather than gatekeeping
- Code proficiency to automate problems (Python, Go or Bash), comfortable reading application code
- Ability to figure things out: read docs, use AI tools effectively, test assumptions, ship
Nice-to-have:
- Prior web or backend development experience
- Exposure to compliance frameworks (DPDPA, ISO 27001, SOC 2)
- Experience securing LLM applications or AI agents
