DevOps Engineer & Security Officer
Our code opens 50,000 doors every morning - for more than 60,000 employees of the world's largest enterprises and over 100 companies worldwide. New York, Chicago, Lima, London, Oslo, Warsaw, Prague. The moment someone taps their phone at a turnstile, holds it at an elevator panel or scans a QR code at reception, our backend runs. Not in the abstract. Literally. In their hands. In real time.
We build a product through which users reach into the real world - a mobile app in your pocket that unlocks the lobby turnstile, screens at reception, navigation panels in the garages. These are all touchpoints you will be working on.
The infrastructure underneath is hybrid: AWS and Kubernetes on one side, around forty Linux servers across seven countries on the other. Everything is in Git: OpenTofu (Terraform) for the cloud, Ansible for anything with an operating system.
The other half of this job is proving how that infrastructure is run. We're ISO 27001:2022 certified and we go through an external audit every year. You will take this over from the CTO: map the controls to what actually runs, write the policies, produce the evidence. So we're not looking for a DevOps engineer, and not for a compliance manager - we're looking for someone who can cover both.
Our stack:
- Cloud and IaC: AWS, OpenTofu (Terraform), Ansible, Docker, Helm
- Kubernetes: EKS, KEDA, cluster-autoscaler, AWS Load Balancer Controller
- Data: Aurora MySQL+PostgreSQL, Redis, RabbitMQ, SQS, S3
- CI/CD and secrets: GitLab CI, Renovate, SOPS + AWS KMS, SSM Parameter Store
- Monitoring and logs: Prometheus, Grafana, Alertmanager, PagerDuty, ELK, Loki, CloudWatch, Sentry
- Network and access: Tailscale, IPsec, Nginx, Route53, ALB, AWS WAF
- Security: AWS Security Hub, Inspector, Config, CloudTrail
- Compliance: ISO 27001:2022, GDPR, CCPA
- Servers: Debian and Ubuntu, as VMs and on bare metal
- Running on top of it: PHP 8.5, VueJS frontends
- Business tools: Slack, G Suite, Jira
- Development process: Scrum
What we expect:
- Production Kubernetes (Helm values), resource limits, rolling updates
- Infrastructure as Code as the default: you write OpenTofu (Terraform) modules and you keep Ansible roles idempotent
- Linux (Debian/Ubuntu) at the level of journald, tcpdump and strace
- AWS IAM you'd be happy to hand an auditor, plus VPC, security groups, KMS, RDS
- You can follow one request from load balancer through ingress and pod all the way to a server in a building six time zones away
- ISO 27001 Annex A: you can say which control a technical measure actually satisfies - and which one it only looks like it satisfies
- An ISO 27001 or SOC 2 audit cycle survived from the inside, GDPR basics, threat modelling, incident response, client security questionnaires
- On-call duty
- Czech or Slovak speaker with communicative English
What we offer:
- A real mandate: you report to the CTO, who currently also wears the CISO hat - and you are the one taking it over
- Compliance work verified by an auditor from the outside: ISO 27001, an annual external audit
- An infrastructure-as-code environment - very little is hand-tuned, and where it still is, you get the list and the mandate to fix it
- AI tool budget (Claude Max / Pro, Gemini, NotebookLM)
- Learning budget
- Flexible working hours, 3/2 or 2/3 remote split
- 5 weeks of vacation, 5 sick days per year
- Offices a few minutes from the Smíchovské nádraží metro station
- Free parking for your car or bike (+ shower)
- Fruit and healthy snacks in the office
- PS5 team
- Company breakfasts, Sharry Beer, parties and team buildings
- Free tickets to public events
- Multisport card
Interested?
The foundations of the "smart building" called Sharry were laid by 4 enthusiasts back in 2016. Together they built the software solution for all new office buildings developed by Skanska in Central Europe. Soon after, Sharry won a tender to become a technology partner for NYC's largest commercial landlord. The company has received two investments to reinforce its position as a global PropTech company - today there are 40+ of us in Prague, Washington, and New York.
Interested? Write us a few words about yourself or send a code sample via the contact form below.
.png)
