Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Zentso is seeking an experienced IT Infrastructure and Security Lead to manage the global infrastructure and security for their revenue-critical SaaS platform, CloudToolz, and internal systems. This senior individual-contributor role involves close collaboration with the CTO on architecture and security strategy, with a focus on transitioning to a containerized, Kubernetes-based deployment model and establishing an observability practice.

Responsibilities

Manage and maintain global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions.
Ensure availability, performance, and scalability of the CloudToolz platform, meeting defined SLAs.
Support the CTO in planning and executing deployments of new CloudToolz releases.
Lead the migration of CloudToolz workloads toward a Kubernetes-based container orchestration model.
Manage and evolve Kubernetes cluster operations including deployments, scaling, resource management, network policies, and RBAC.
Build and maintain an observability stack using Grafana OSS, including dashboards, alerting, and integration with metrics, logs, and traces.
Manage DNS, CDN, WAF, and DDoS protection through Cloudflare.
Monitor system performance, identify and resolve bottlenecks, and lead incident response and recovery.
Maintain up-to-date documentation, runbooks, configuration standards, and disaster recovery procedures.
Lead IT security operations including identity and access management, endpoint protection, and vulnerability management.
Administer and enforce policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4.
Develop and enforce data protection and compliance policies aligned to GDPR and ISO 27001 frameworks.
Conduct and coordinate security awareness training, phishing simulations, and incident response exercises.
Monitor for threats and manage response, escalation, and remediation processes.
Administer and optimise Microsoft 365 across the organisation.
Manage Salesforce administration within scope, in coordination with the product team.
Own configuration and policy management for endpoint security tools and password management.
Collaborate with the CTO on infrastructure scaling strategy, architecture decisions, and technology selection.
Drive adoption of infrastructure-as-code practices.
Drive automation of routine operations using PowerShell, scripting, and monitoring tooling.
Provide input into sprint planning and release coordination with the Product Owner for environment-level requirements.
Participate in on-call rotation to ensure platform availability across time zones.

Requirements

5 or more years of experience in IT infrastructure, cloud operations, systems administration, or DevOps roles.
Strong hands-on experience with Windows Server 2022 and SQL Server in production environments.
Proven experience with MongoDB and Redis in operational contexts.
Demonstrated Cloudflare experience covering DNS management, WAF rules, CDN configuration, and security features.
Solid proficiency in Microsoft 365 administration, including Entra ID (Azure AD), Exchange Online, and SharePoint.
Working knowledge of enterprise security tools; direct experience with Bitwarden, KnowBe4, Bitdefender GravityZone, or equivalent products is preferred.
Strong understanding of networking fundamentals including firewalls, VPNs, DNS, and access control architecture.
Sound knowledge of GDPR and practical experience implementing or maintaining compliance controls.
Ability to work independently, manage competing priorities, and communicate clearly with both technical and non-technical stakeholders.
Experience working with geographically distributed teams across multiple time zones.

Skills

Kubernetes
Grafana OSS
Prometheus
Loki
Docker
containerd
Helm
kubectl
PowerShell scripting
Infrastructure-as-code (Terraform, Pulumi, Ansible)
CI/CD pipelines
GitOps workflows
Salesforce administration

Location

Berlin, Germany

Work Type

Full-time
Permanent
Remote-first
Flexible hours

Experience Level

Senior

Education Level

MCSE
CISSP
CompTIA Security+
CKA

Salary/Compensations

€60,000 – €85,000 per year
Typical target: €70,000 – €80,000 per year

Benefits

Performance bonus: Discretionary, based on individual and company performance
Pension: Employer contribution in line with local requirements
Probation: 6 months

About the Company

Zentso is a software company specializing in association management technology.
We build and maintain the CloudToolz platform, which extends iMIS RiSE with advanced workflow automation, forms, analytics, CRM, CMS, and payment processing capabilities.
Our clients include national professional associations, peak bodies, and member-based organisations across Australia, the UK, and the Asia Pacific region.
We operate as a small, distributed team with a strong emphasis on technical ownership, direct communication, and pragmatic decision-making.
The right person for this role will be someone who takes genuine satisfaction in keeping complex systems running reliably and securely, and who can operate with a high degree of autonomy.