SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Duna is redefining identity for the global economy, backed by world-class investors including CapitalG and Index Ventures, with founders and executives from Stripe, Adyen, Notion, Remote, Qonto, Framer, Anthropic, Mollie, OpenAI and Goldman Sachs. The company is building infrastructure as a core part of its product, where enterprise customers rely on reliability, security posture, and auditability.
In this role, you will own and harden Duna's platform, taking responsibility for AWS, Kubernetes, Postgres, infrastructure as code, CI/CD, observability, and incident response. You'll make security the default by implementing least privilege, secrets management, and tenant isolation as built-in platform features rather than afterthoughts. You'll translate SOC 2 and ISO 27001 commitments into automated controls and evidence, eliminating yearly scrambles. You'll turn recurring operational toil into self-service systems that engineers actually adopt, from preview environments to internal access management. You'll help Duna safely run AI agents in engineering with appropriate sandboxes, guardrails, and human checkpoints. You'll take calm ownership of incidents and ensure systemic improvements, not just momentary fixes.
The platform runs on AWS and Kubernetes with Terraform, Postgres, and RabbitMQ, alongside a Node.js and TypeScript product stack built on event sourcing. You'll work in a remote-first, fast-moving team of builders who value curiosity, authenticity, and kindness alongside passion and grit.
REQUIREMENTS:
- Deep, hands-on experience with AWS (or comparable cloud platform), Kubernetes, infrastructure as code, CI/CD, and observability
- Real security engineering skills: ability to turn least privilege and auditability requirements into working systems
- Comfort with the enterprise IT side of a startup, including certifications, customer security reviews, identity and device management
- High agency in ambiguity; ability to turn vague problems into shipped plans
- Pragmatic judgment about when to harden, when to simplify, and when to leave something alone
- Curiosity about how AI changes how we build and run software
- Note: You will not have used all of the tech stack before; the company values depth and your ability to pick up new tools
