IT Infrastructure and Security Engineer

Zentso builds and operates CloudToolz a revenue-critical SaaS platform layered on top of iMIS RiSE association management software serving clients across the UK Europe United States and Asia Pacific. The platform encompasses workflow automation form building CRM CMS and payment processing capabilities delivered to organisations in multiple sectors.

We are seeking a motivated IT Infrastructure and Security Engineer to support the global infrastructure and security posture underpinning CloudToolz and Zentsos internal systems. This is a hands-on junior-to-mid-level role working closely with the IT Infrastructure and Security Lead and the CTO assisting with day-to-day operations security tasks and the ongoing migration toward a containerised Kubernetes-based deployment model. The successful candidate will be comfortable working across a distributed multi-region environment contributing directly to uptime security and compliance outcomes for a production platform.

A key part of this role is supporting Zentsos transition to Kubernetes and helping build out an observability practice around Grafana OSS alongside contributing scripts and small applications that automate and support infrastructure operations.

Tasks

Infrastructure and Platform Operations

• Help manage global infrastructure spanning Windows Server 2022 SQL Server MongoDB Redis and Cloudflare across four regions supporting the availability performance and scalability of the revenue-critical CloudToolz platform.
• Support deployments of new CloudToolz releases ( Core integrating with Dynamics iMIS Salesforce and native CRM/CMS) and contribute to the Kubernetes migration including cluster operations such as deployments scaling network policies and RBAC.
• Help build and maintain a Grafana OSS observability stack dashboards alerting and integration with metrics logs and with DNS CDN WAF and DDoS protection via Cloudflare; monitor system performance and participate in incident response and recovery.
• Maintain documentation runbooks and disaster recovery procedures.
• Write shell scripts and small infrastructure-related applications (automation tools monitoring utilities internal dashboards) in coordination with the Infrastructure Lead.

Security Operations

• Support identity and access management endpoint protection and vulnerability management.
• Help administer policies across Microsoft 365 Bitwarden Bitdefender GravityZone and KnowBe4.
• Contribute to GDPR/ISO 27001-aligned data protection policies security awareness training phishing simulations and threat monitoring/response.

IT Systems Administration

• Support Microsoft 365 administration (Exchange Online SharePoint Teams Entra ID) and Salesforce administration within scope.
• Share responsibility for endpoint security and password management configuration.

Strategy and Continuous Improvement

• Provide input on infrastructure scaling architecture decisions and the containerisation roadmap.
• Support infrastructure-as-code adoption and automate routine operations using PowerShell shell scripting and other languages.
• Contribute to sprint planning for environment-level requirements and participate in on-call rotation.

Requirements

Essential

• 2 years of experience in IT infrastructure cloud operations systems administration or DevOps.
• Hands-on experience with Windows Server 2022 SQL Server MongoDB and Redis in operational Cloudflare experience (DNS WAF CDN security features).
• Working proficiency in Microsoft 365 administration including Entra ID Exchange Online and SharePoint.
• Hands-on Kubernetes experience: workload deployment basic cluster operations networking (ingress network policies) and RBAC.
• Solid understanding of networking fundamentals (firewalls VPNs DNS access control).
• Working knowledge of GDPR and experience supporting compliance controls.
• Ability to write shell scripts and program in at least one modern language (e.g. Python Go C# JavaScript/TypeScript) with willingness to build small infrastructure-related applications and tools.
• Strong communication skills and ability to work independently within a distributed multi-time-zone team.

Preferred

• Experience with Grafana OSS Prometheus and Loki.
• Familiarity with Docker containerd Helm and kubectl.
• Certifications such as MCSA CompTIA Security CKA or equivalent.
• Familiarity with ISO 27001 audit/certification processes.
• PowerShell scripting for automation and reporting.
• Exposure to Terraform Pulumi Ansible CI/CD or GitOps.
• Salesforce administration experience.

Benefits

This is a full-time permanent position based in Berlin Germany offered on a remote-first basis. The CloudToolz platform operates continuously across multiple regions; the role includes on-call and out-of-hours escalation responsibilities.

Salary range:per year

Performance bonus: Discretionary based on individual and company performance

Pension: Employer contribution in line with local requirements

Flexible working: Remote-first; flexible hours with availability for global coordination

Probation: 6 months

Compensation is commensurate with demonstrable experience and the scope of the role. The range reflects a small-business context while remaining competitive for the Berlin IT market for this level of responsibility.

About Zentso
Zentso is a software company specialising in association management technology. We build and maintain the CloudToolz platform which extends iMIS RiSE with advanced workflow automation forms analytics CRM CMS and payment processing capabilities. Our clients include national professional associations peak bodies and member-based organisations across Australia the UK and the Asia Pacific region.

We operate as a small distributed team with a strong emphasis on technical ownership direct communication and pragmatic decision-making. The right person for this role will be someone who takes genuine satisfaction in keeping complex systems running reliably and securely and who can operate with a high degree of autonomy.

Note: Please include a cover letter with your CV explaining why you believe your qualifications and experience make you a strong fit for this position.