About the Role
Zentso is seeking a motivated IT Infrastructure and Security Engineer to support the global infrastructure and security posture of its revenue-critical SaaS platform, CloudToolz. This hands-on, junior-to-mid-level role involves assisting with daily operations, security tasks, and the migration to a containerized, Kubernetes-based deployment model. The successful candidate will contribute to uptime, security, and compliance in a distributed, multi-region environment, with a focus on supporting the transition to Kubernetes and building an observability practice.
Responsibilities
- Manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions.
- Support deployments of new CloudToolz releases and contribute to the Kubernetes migration.
- Build and maintain a Grafana OSS observability stack.
- Assist with DNS, CDN, WAF, and DDoS protection via Cloudflare.
- Monitor system performance and participate in incident response and recovery.
- Maintain documentation, runbooks, and disaster recovery procedures.
- Write shell scripts and small infrastructure-related applications.
- Support identity and access management, endpoint protection, and vulnerability management.
- Administer policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4.
- Contribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring/response.
- Support Microsoft 365 administration and Salesforce administration.
- Share responsibility for endpoint security and password management configuration.
- Provide input on infrastructure scaling, architecture decisions, and the containerisation roadmap.
- Support infrastructure-as-code adoption and automate routine operations.
- Contribute to sprint planning for environment-level requirements.
- Participate in on-call rotation.
Requirements
- 2+ years of experience in IT infrastructure, cloud operations, systems administration, or DevOps.
- Hands-on experience with Windows Server 2022, SQL Server, MongoDB, and Redis in operational contexts.
- Practical Cloudflare experience (DNS, WAF, CDN, security features).
- Working proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint.
- Hands-on Kubernetes experience: workload deployment, basic cluster operations, networking, and RBAC.
- Solid understanding of networking fundamentals (firewalls, VPNs, DNS, access control).
- Working knowledge of GDPR and experience supporting compliance controls.
- Ability to write shell scripts and program in at least one modern language (e.g. Python, Go, C#, JavaScript/TypeScript).
- Willingness to build small infrastructure-related applications and tools.
- Strong communication skills.
- Ability to work independently within a distributed, multi-time-zone team.
Skills
- Windows Server 2022
- SQL Server
- MongoDB
- Redis
- Cloudflare
- ASP.NET Core
- Dynamics
- iMIS
- Salesforce
- Kubernetes
- Grafana OSS
- shell scripting
- Python
- Go
- C#
- JavaScript/TypeScript
- Microsoft 365
- Entra ID
- Exchange Online
- SharePoint
- Bitwarden
- Bitdefender GravityZone
- KnowBe4
- GDPR
- ISO 27001
- PowerShell
- Terraform
- Pulumi
- Ansible
- CI/CD
- GitOps
- Prometheus
- Loki
- Docker
- containerd
- Helm
- kubectl
Location
- Berlin, Germany
Work Type
- Full-time
- Permanent
- Remote-first
- On-call
Experience Level
- Junior-to-mid-level
- 2+ years
Education Level
- MCSA
- CompTIA Security+
- CKA
Salary/Compensations
- €55,000 – €75,000 per year
Benefits
- Performance bonus
- Employer contribution pension
- Flexible working hours
About the Company
- Zentso builds and operates CloudToolz, a revenue-critical SaaS platform layered on top of iMIS RiSE association management software.
- The platform encompasses workflow automation, form building, CRM, CMS, and payment processing capabilities.
- Zentso is a software company specialising in association management technology.
- We operate as a small, distributed team with a strong emphasis on technical ownership, direct communication, and pragmatic decision-making.
- The right person for this role will be someone who takes genuine satisfaction in keeping complex systems running reliably and securely, and who can operate with a high degree of autonomy.
