Cloud & DevSecOps Engineer - Berlin or remote

wealthAPI is a tech-driven Finance startup (FinTech) aiming to change the way we plan and manage our wealth. Our customers integrate our APIs and services into a wide range of financial applications; always with one aim: improve the way we manage and plan our wealth. wealthAPI is primarily owned by its founders and operates under a long-term growth strategy.

At wealthAPI, we live an open discussion culture, decide together and develop as a team. Your are encouraged to take your own decisions and actively shape our products.

We combine technical excellency with a deep understanding of financial markets. Sharing knowledge is part of the "wealthAPI DNA".

We love our work - and are passionate about our products.

For remote positions - a note on your time zone

We are a small and efficient team. To keep our cooperation as smooth as possible, your place of residence should be in a time zone +/- 2 hours Berlin time.

Tasks

• Manage and evolve our cloud platform (primarily GCP, but AWS/Azure experience also valued), including infrastructure provisioning and cost optimization.
• Design, deploy, and maintain Kubernetes clusters and workloads, ensuring proper scaling, resource allocation, and best practices.
• Develop, optimize, and maintain cloud databases (SQL/NoSQL) for performance, reliability, and cost-efficiency.
• Build, maintain, and improve CI/CD pipelines (GitLab CI or equivalent) and automate infrastructure provisioning with IaC tools (Terraform, Helm, etc.).
• Implement and manage messaging/event-driven systems (e.g., Pub/Sub, Kafka, SNS/SQS).
• Monitor system performance, set up observability dashboards and alerts (Prometheus, Grafana, ELK/EFK).
• Apply security best practices across infrastructure, including IAM, secrets management, vulnerability scanning, patching, and compliance support.
• Conduct or support security assessments , penetration testing follow-ups, and incident response activities.
• Collaborate with developers and stakeholders to propose architecture improvements, optimize workflows, and implement scalable solutions.
• Maintain and improve disaster recovery and backup strategies , ensuring operational resilience.

Requirements

Must Have

• 3+ years of experience in cloud infrastructure, DevOps, or related roles.
• Strong experience with at least one major cloud provider (GCP, AWS, or Azure).
• Hands-on expertise with Kubernetes (cluster setup, workloads, scaling, secrets, nodepools, best practices).
• Proficiency in cloud database management and optimization (SQL/NoSQL).
• Experience with CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins, or equivalent).
• Infrastructure as Code skills (Terraform, Helm, or similar).
• Good understanding of networking, load balancing, and cloud-native architectures.
• Familiarity with messaging/event systems (e.g., Pub/Sub, Kafka, SNS/SQS).
• Strong security background: IAM, secrets management, vulnerability scanning, patching.
• Experience in monitoring/alerting/observability (Prometheus, Grafana, ELK/EFK, or equivalent).

Beneficial

• GCP certifications (or AWS/Azure equivalents).
• Experience with service meshes (Istio, Linkerd).
• Knowledge of container security tools (Trivy, Falco, Aqua, etc.).
• Exposure to compliance frameworks (ISO 27001, SOC2, GDPR, etc.).
• Hands-on penetration testing or security assessment background.
• Familiarity with serverless/cloud functions and event-driven design.
• Cost optimization experience for cloud workloads.

Soft Skills

• Collaborative and engaged approach – works closely with developers and stakeholders to explore the best solutions, rather than limiting contributions to predefined tasks.
• Proactive problem-solver who can propose and drive improvements.
• Security-first mindset with attention to detail.
• Ability to balance speed and stability in a fast-paced environment.

Language skills:

• English is mandatory
• German is a plus

Benefits

We are a highly-functional team that focuses on personal and professional growth. We discuss openly, decide in the team and implement together. We combine technical excellence with a deep understanding of financial markets. Learning from each other is part of the “wealthAPI DNA”. We will take you with us on this educational journey.

We offer:

• 30 days of paid leave
• virtual shares program
• flexible working times
• fully remote or hybrid positions
• Urban Sports Club membership
• modern Apple hardware

wealthAPI is an equal career opportunity no matter your gender, identity, race or religion.

We value transparency, close collaboration, and a slight amount of chaos in our work because it makes us faster and more creative.