All roles·Infrastructure
DevOps & Security Engineer
We build custom software that ends up in production, used every day by manufacturers and mid-sized companies. This role exists so that production holds: reproducible infrastructure, deployments without drama, and a level of security we can demonstrate to a client and to their auditor.
- Contract
- Permanent
- Location
- France · partly remote
- Experience
- 3+ years
- Compensation
- Based on experience, discussed in the first call
The role
You own the technical foundation shared by our projects: hosting, deployment pipelines, monitoring and the security of everything we ship. You work alongside the developers, on the same projects, from framing through to go-live.
We are a small team. You do not inherit a frozen platform: you decide what it becomes, you document your choices, and you argue them with the team rather than with a committee.
What you will do
- Design and maintain our cloud environments as infrastructure as code, on greenfield projects and on inherited client systems.
- Industrialise deployments: CI/CD pipelines, staging environments, zero-downtime releases, tested rollbacks.
- Harden applications and platforms: secret management, network segmentation, access policies, encryption, dependency review.
- Put monitoring, alerting and backups in place, then verify that restores actually work.
- Own the technical side of compliance: traceability, GDPR, data residency, answering the security questionnaires of our enterprise clients.
- Handle incidents, analyse them, and turn each one into a fix or a guardrail.
Who we are looking for
- At least three years on infrastructure, SRE or DevSecOps work, on applications genuinely running in production.
- Solid practice with Linux, networking, containers and their orchestration.
- Real fluency with infrastructure as code (Terraform, Pulumi or equivalent) and with at least one major cloud provider.
- Security reflexes learned in the field: threat modelling, secret management, least privilege, vulnerability remediation.
- Code: Python, Go, TypeScript or Bash, enough to automate and to review other people’s work.
- The ability to explain a technical risk to an executive without jargon and without dramatising it.
We read applications from people who do not tick every line. What counts is what you have kept running, not the length of the list.
What we offer
- Short, varied projects: 3D configurators, digital twins, client platforms, internal business tools.
- A small team with no middle management layer: you talk directly to the people who use what you build.
- Remote work, a sustainable pace, and releases during office hours.
- A training and certification budget, because this role goes stale fast without one.
Hiring process
- A thirty-minute first call, to check the role matches what you are looking for.
- A one-hour technical interview on a real case from our projects, with no algorithm puzzles.
- A conversation with the team, and a reasoned answer within five working days.
We reply to every application, including when the answer is no.