{"id":2220914,"url":"https://alion.io/job/zentso-it-infrastructure-and-security-engineer","title":"IT Infrastructure and Security Engineer","company":{"id":1835974,"name":"Zentso","domain":"zentso.com","url":"https://alion.io/company/zentso","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":["DE"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":140000,"period":"year","method":"role_country_seniority_unknown","sample_n":51},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"ASP.NET Core","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"containerd","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GDPR","optional":false},{"name":"GitOps","optional":false},{"name":"Grafana","optional":false},{"name":"Helm","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"kubectl","optional":false},{"name":"Kubernetes","optional":false},{"name":"Loki","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Prometheus","optional":false},{"name":"Pulumi","optional":false},{"name":"Python","optional":false},{"name":"Redis","optional":false},{"name":"SharePoint","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-10T08:22:07Z","employer_posted_date":null,"last_verified_at":"2026-10-10T08:22:07Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Zentso builds and operates CloudToolz, a revenue-critical SaaS platform layered on top of iMIS RiSE association management software, serving clients across the UK, Europe, United States, and Asia Pacific. The platform encompasses workflow automation, form building, CRM, CMS, and payment processing capabilities delivered to organisations in multiple sectors.\n\nWe are seeking a motivated IT Infrastructure and Security Engineer to support the global infrastructure and security posture underpinning CloudToolz and Zentso's internal systems. This is a hands-on, junior-to-mid-level role working closely with the IT Infrastructure and Security Lead and the CTO, assisting with day-to-day operations, security tasks, and the ongoing migration toward a containerised, Kubernetes-based deployment model. The successful candidate will be comfortable working across a distributed, multi-region environment, contributing directly to uptime, security, and compliance outcomes for a production platform.\n\nA key part of this role is supporting Zentso's transition to Kubernetes and helping build out an observability practice around Grafana OSS, alongside contributing scripts and small applications that automate and support infrastructure operations.\n\nTasks\n\nInfrastructure and Platform Operations\n\nHelp manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions, supporting the availability, performance, and scalability of the revenue-critical CloudToolz platform.\n\nSupport deployments of new CloudToolz releases (ASP.NET Core, integrating with Dynamics, iMIS, Salesforce, and native CRM/CMS) and contribute to the Kubernetes migration, including cluster operations such as deployments, scaling, network policies, and RBAC.\n\nHelp build and maintain a Grafana OSS observability stack — dashboards, alerting, and integration with metrics, logs, and traces.Assist with DNS, CDN, WAF, and DDoS protection via Cloudflare; monitor system performance and participate in incident response and recovery.\n\nMaintain documentation, runbooks, and disaster recovery procedures.\n\nWrite shell scripts and small infrastructure-related applications (automation tools, monitoring utilities, internal dashboards) in coordination with the Infrastructure Lead.\n\nSecurity Operations\n\nSupport identity and access management, endpoint protection, and vulnerability management.\n\nHelp administer policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4.\n\nContribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring/response.\n\nIT Systems Administration\n\nSupport Microsoft 365 administration (Exchange Online, SharePoint, Teams, Entra ID) and Salesforce administration within scope.\n\nShare responsibility for endpoint security and password management configuration.\n\nStrategy and Continuous Improvement\n\nProvide input on infrastructure scaling, architecture decisions, and the containerisation roadmap.\n\nSupport infrastructure-as-code adoption and automate routine operations using PowerShell, shell scripting, and other languages.\n\nContribute to sprint planning for environment-level requirements and participate in on-call rotation.\n\nRequirements\n\nEssential\n\n2+ years of experience in IT infrastructure, cloud operations, systems administration, or DevOps.\n\nHands-on experience with Windows Server 2022, SQL Server, MongoDB, and Redis in operational contexts.Practical Cloudflare experience (DNS, WAF, CDN, security features).\n\nWorking proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint.\n\nHands-on Kubernetes experience: workload deployment, basic cluster operations, networking (ingress, network policies), and RBAC.\n\nSolid understanding of networking fundamentals (firewalls, VPNs, DNS, access control).\n\nWorking knowledge of GDPR and experience supporting compliance controls.\n\nAbility to write shell scripts and program in at least one modern language (e.g. Python, Go, C#, JavaScript/TypeScript), with willingness to build small infrastructure-related applications and tools.\n\nStrong communication skills and ability to work independently within a distributed, multi-time-zone team.\n\nPreferred\n\nExperience with Grafana OSS, Prometheus, and Loki.\n\nFamiliarity with Docker, containerd, Helm, and kubectl.\n\nCertifications such as MCSA, CompTIA Security+, CKA, or equivalent.\n\nFamiliarity with ISO 27001 audit/certification processes.\n\nPowerShell scripting for automation and reporting.\n\nExposure to Terraform, Pulumi, Ansible, CI/CD, or GitOps.\n\nSalesforce administration experience.\n\nBenefits\n\nThis is a full-time, permanent position based in Berlin, Germany, offered on a remote-first basis. The CloudToolz platform operates continuously across multiple regions; the role includes on-call and out-of-hours escalation responsibilities.\n\nSalary range: €55,000 – €75,000 per year\n\nPerformance bonus: Discretionary, based on individual and company performance\n\nPension: Employer contribution in line with local requirements\n\nFlexible working: Remote-first; flexible hours with availability for global coordination\n\nProbation: 6 months\n\nCompensation is commensurate with demonstrable experience and the scope of the role. The range reflects a small-business context while remaining competitive for the Berlin IT market for this level of responsibility.\n\nAbout Zentso\nZentso is a software company specialising in association management technology. We build and maintain the CloudToolz platform, which extends iMIS RiSE with advanced workflow automation, forms, analytics, CRM, CMS, and payment processing capabilities. Our clients include national professional associations, peak bodies, and member-based organisations across Australia, the UK, and the Asia Pacific region.\n\nWe operate as a small, distributed team with a strong emphasis on technical ownership, direct communication, and pragmatic decision-making. The right person for this role will be someone who takes genuine satisfaction in keeping complex systems running reliably and securely, and who can operate with a high degree of autonomy.\n\nNote: Please include a cover letter with your CV explaining why you believe your qualifications and experience make you a strong fit for this position.\nFind more English Speaking Jobs in Germany on Arbeitnow","description_format":"text","description_chars":6382,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","CRM Software","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-10T13:33:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":26,"reasons":["seen:1","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/zentso-it-infrastructure-and-security-engineer","json_url":"https://alion.io/job/zentso-it-infrastructure-and-security-engineer.json","meta":{"generated_at":"2026-10-12T10:27:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16034,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1835974},"rest":"https://alion.io/mcp/rest/get_company?id=1835974"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzentso-it-infrastructure-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzentso-it-infrastructure-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzentso-it-infrastructure-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zentso-it-infrastructure-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzentso-it-infrastructure-and-security-engineer"}]}