Platform & Security Engineer

About the role

ABOUT ATLYS

Our mission is to enable every person on Earth to travel freely.

Travel should feel exciting. Instead, too much of it is still defined by paperwork, uncertainty, and processes that were never designed for travellers.

Atlys is changing that.

We're building an AI-first platform that removes friction and uncertainty from travel. To date, we've processed visas for 1M+ travellers across 127 countries. But we're still early. We’re now building AI-native products too, including agents that act on behalf of travellers.

THE ROLE

We're looking for a Platform & Security Engineer to own the foundations that keep Atlys fast, reliable and secure.

Not someone who simply keeps servers running or closes tickets from a scanner. We're looking for someone who treats infrastructure and security as products: who designs systems that are secure by default, automates away toil, and gives every engineer a paved road to ship safely.

Few companies handle data as sensitive as ours. Passports, financial documents, photographs and identity records flow every day between travellers, partners and government systems across 127 countries. You'll own the cloud infrastructure, security posture and reliability of the platform that processes it, and make sure it scales as we grow.

You’ll be the second engineer on our Infra & Security team. That means real ownership from week one: you’ll take over large parts of our infrastructure and security roadmap, not a narrow slice of it.

We don’t expect you to have done all of this before. We care far more about strong fundamentals and the ability to figure things out. You’ll have AI tools at your disposal and the room to learn whatever you haven’t touched yet.

THE JOB

- Own our cloud infrastructure. Run and improve our Kubernetes platform on GCP (with some workloads on AWS). Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps.

- Make the platform observable and reliable. Bring logs, metrics and traces into one place, set up alerting that people trust, and take part in on-call and incident response. Keep an eye on cloud cost and catch anomalies early.

- Run our data layer. Own database performance optimizations, backups and access automation, along with caching and our messaging infrastructure.

- Lock down access. Enforce least-privilege IAM across cloud, Kubernetes and GitHub. Run zero-trust access to internal services, SSO, and clean offboarding.

- Protect sensitive data. Design and harden access controls and audit logging for PII such as passports, financial documents and identity records.

- Build security into how we ship. Add SAST, DAST, dependency and container scanning, and SBOMs to CI/CD. Run vulnerability management and coordinate pentests. Find and validate application security issues (authorization, authentication, business logic, injection), drive fixes with service owners, and fix directly where it makes sense.