Platform & Security Engineer

📋 Job Overview

About Atlys

Our mission is to enable every person on Earth to travel freely. Travel should feel exciting. Instead, too much of it is still defined by paperwork, uncertainty, and processes that were never designed for travellers. Atlys is changing that. We're building an AI-first platform that removes friction and uncertainty from travel. To date, we've processed visas for 1M+ travellers across 127 countries. But we're still early. We’re now building AI-native products too, including agents that act on behalf of travellers.

🏢 About Atlys

We're looking for a Platform & Security Engineer to own the foundations that keep Atlys fast, reliable and secure. Not someone who simply keeps servers running or closes tickets from a scanner. We're looking for someone who treats infrastructure and security as products: who designs systems that are secure by default, automates away toil, and gives every engineer a paved road to ship safely. Few companies handle data as sensitive as ours. Passports, financial documents, photographs and identity records flow every day between travellers, partners and government systems across 127 countries. You'll own the cloud infrastructure, security posture and reliability of the platform that processes it, and make sure it scales as we grow. You’ll be the second engineer on our Infra & Security team. That means real ownership from week one: you’ll take over large parts of our infrastructure and security roadmap, not a narrow slice of it. We don’t expect you to have done all of this before. We care far more about strong fundamentals and the ability to figure things out. You’ll have AI tools at your disposal and the room to learn whatever you haven’t touched yet.

🎯 The Role

Own our cloud infrastructure. Run and improve our Kubernetes platform on GCP (with some workloads on AWS). Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps. Make the platform observable and reliable. Bring logs, metrics and traces into one place, set up alerting that people trust, and take part in on-call and incident response. Keep an eye on cloud cost and catch anomalies early. Run our data layer. Own database performance optimizations, backups and access automation, along with caching and our messaging infrastructure. Lock down access. Enforce least-privilege IAM across cloud, Kubernetes and GitHub. Run zero-trust access to internal services, SSO, and clean offboarding. Protect sensitive data. Design and harden access controls and audit logging for PII such as passports, financial documents and identity records. Build security into how we ship. Add SAST, DAST, dependency and container scanning, and SBOMs to CI/CD. Run vulnerability management and coordinate pentests. Find and validate application security issues (authorization, authentication, business logic, injection), drive fixes with service owners, and fix directly where it makes sense. Secure our AI products. Threat-model and harden AI agents and assistants that act on users’ behalf: prompt injection, tool and OAuth scope permissions, data leakage between users, and secrets handling.

✅ Key Responsibilities

• Own our cloud infrastructure, running and improving our Kubernetes platform on GCP (with some workloads on AWS).
• Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps.
• Make the platform observable and reliable by bringing logs, metrics and traces into one place, setting up alerting, and participating in on-call and incident response.
• Keep an eye on cloud cost and catch anomalies early.
• Run our data layer, owning database performance optimizations, backups and access automation, along with caching and our messaging infrastructure.
• Lock down access by enforcing least-privilege IAM across cloud, Kubernetes and GitHub, running zero-trust access to internal services, SSO, and clean offboarding.
• Protect sensitive data by designing and hardening access controls and audit logging for PII such as passports, financial documents and identity records.
• Build security into how we ship by adding SAST, DAST, dependency and container scanning, and SBOMs to CI/CD, running vulnerability management and coordinating pentests.
• Find and validate application security issues (authorization, authentication, business logic, injection), drive fixes with service owners, and fix directly where it makes sense.
• Secure our AI products by threat-modeling and hardening AI agents and assistants that act on users’ behalf: prompt injection, tool and OAuth scope permissions, data leakage between users, and secrets handling.

📌 Required Qualifications

• Have 4+ years of experience in infrastructure, DevOps, security engineering, ideally at a product company handling sensitive or regulated data.
• Have strong fundamentals in Linux, networking (DNS, TLS, HTTP, load balancing), containers and Kubernetes, and at least one public cloud.
• Understand security fundamentals (identity and access, encryption, secrets management, the OWASP Top 10) and have applied them in production, not just on paper.
• Are strong in either infrastructure or security, and genuinely want to get good at the other.
• Take ownership end to end. You make pragmatic trade-offs between security, speed and developer experience. You explain risk clearly and bring engineers along rather than acting as a gatekeeper.
• Can write code to automate your way out of problems (Python, Go or Bash), and are comfortable reading application code.
• Figure things out. When you hit something new, you read the docs, use AI tools well, test your assumptions and ship.

⭐ Desirable Experience

• Prior web or backend development experience
• Exposure to compliance frameworks such as DPDPA, ISO 27001 or SOC 2
• Experience securing LLM applications or AI agents

🎁 Benefits

Atlys is built by a small team with outsized ambition, high ownership, and an obsession with doing great work. Here's what you can expect:

Competitive compensation and equity so you participate in the value you help create.
Comprehensive health insurance covering you and your family, plus annual preventive health check-up on us.
A thoughtful leave policy with paid time off and company holidays, because great work also requires real time off.
Lunch, high tea and dinner at the office, so the basics are taken care of while we build together.
Learning & development credits to invest in courses, books, conferences and tools that help you get better at your craft.
Relocation support to make moving closer to the team as seamless as possible.
Great tools to do your best work, including high-spec equipment and software.
An office designed for more than just work, with pickleball, table tennis, PlayStation, an arcade game room, an F1 simulator and even a full flight simulator.

🛂 Visa & Eligibility

Relocation support to make moving closer to the team as seamless as possible.