Founding Platform & Security Engineer; DevSecOps

The Context: Banking is built on trust. Porters has a solid AWS foundation running on Cloud Formation, but as we scale, we must further improve our platform excellence and cybersecurity posture. This is a founding role with a dual focus on compliance architecture and platform/cloud engineering.

The Mission: You will own our infrastructure and security architecture end-to-end. You will lead the "Heavy Lift" of achieving certification (starting with ISO
27001) while further building out our networking layer that allows us to run secure workloads across AWS, Azure, and GCP.

This job is in person (Zurich, Switzerland) or remote (CET +/-3 hours).

• Architect Cross-Cloud Workloads: Design and implement the networking to run cross-platform inference (e.g., calling Gemini in Vertex AI from AWS ECS)

• Evolve our AWS Stack: Augment our existing Cloud Formation approach, e.g., accelerated deployment and improved CI/CD practices, multi-region replication/failover, auto-scaling, etc.

• Advanced Authentication: Build our Machine-to-Machine (M2M) inbound authentication layer for secure inbound calls from customer systems

• Compliance & DPO: Uphold our certification using Vanta, serve as the right hand of our Data Protection Officer (DPO), establish our BCP and Disaster Recovery plans

• Experience: 5+ years in SRE, Dev Ops, or Security Engineering, with a specific focus on fintech or regulated industries

• Cloud & Infrastructure Mastery: Deep mastery of AWS (ECS, RDS, IAM, VPC) and Infrastructure as Code (Cloud Formation, Terraform). Proven experience setting up secure, cross-platform networking in Azure or GCP

• Security & Compliance: Direct experience guiding a startup through certification readiness and maintaining it (e.g., ISO
  27001, SOC2, PCI DSS). Familiarity with Vanta, Risk Registers, and implementing Business Continuity/Disaster Recovery plans

• Automation Mindset: Strong proficiency in Python for infrastructure automation and Git Hub Actions for CI/CD. You are capable of implementing "Database as Code" and automated security scanning (SAST/DAST) into the pipeline