Skip to content

Sr. DevSecOps Engineer

  • Hybrid
    • Delft, Zuid-Holland, Netherlands
    • Utrecht, Utrecht, Netherlands
    +1 more

The platform team owns the core of Eddy Grid, and you work across all of it: integrations with grid operators.

Job description

As Senior DevOps Security Engineer at Eddy Grid, you build the foundation under a rapidly growing trading platform that steers batteries, solar parks and charging stations on the energy markets, 24/7. When the markets move every minute, downtime is not an option. You make sure it does not happen while keeping velocity as high as possible, and you make sure the platform is secure. Security is at the core of this role.

Our engineers work with AI coding agents every day, and more and more work is done by agents that query data, run simulations and pick up tickets. That needs infrastructure built for it.

We are moving our platform from a managed hosting platform (PaaS) to our own AWS setup, managed with Terraform, and the first parts, such as our simulation workers on ECS, already run there. We are looking for a senior engineer to own our infrastructure end to end: you close the security gaps in our current setup, get us ready for NIS2 and the Cbw, and grow into leading our new infrastructure team.

You start in the platform team, working closely with the developers who build our trading and integration software. We work hybrid, with 2 days a week at our office in Delft and the whole team together in Utrecht on Fridays.

We are a fast-growing scale-up, so speed matters. We are looking for someone who knows the limits of our setup, knows where we can safely cut corners and where we can't, and is critical about both. A bus that runs on three wheels is fine for now, as long as you know which wheel is missing and when it needs to go back on.


Job requirements

What you will do

  • Drive security: IAM, networking, secrets, backups and disaster recovery across our development and production accounts.

  • Protect our platform against modern threats, including agent-based attacks, and lead our compliance work for NIS2 and the Cbw.

  • Own our AWS infrastructure (ECS, EC2, S3 and more) and build it with Terraform, choosing the simple solution where that is good enough.

  • Plan and lead the migration of our production workloads from our current PaaS to AWS, without disrupting live trading.

  • Set up safe environments for AI agents, such as isolated dev sandboxes and credentials with limited rights.

  • Own our CI/CD pipelines in GitHub Actions and our Docker-based release process, so changes go live quickly and safely.

  • Set up monitoring, alerting, and incident response, and lead when things go wrong in production.

  • Help hire new infrastructure colleagues as the team grows.


What you will bring

  • Several years of experience designing and running production workloads on AWS.

  • Deep experience with infrastructure as code, preferably Terraform, including designing reusable modules.

  • Strong knowledge of Docker and container orchestration on ECS.

  • A strong cybersecurity background, with a solid understanding of cloud networking, IAM, and security best practices.

  • Experience leading a larger infrastructure change, such as a cloud migration, from plan to production.

  • Experience with CI/CD, observability, and incident management.

  • Have experience with PostgreSQL, Redis, and Celery in production, including scaling and backups.

  • You are pragmatic: you know the best practices, and you know when good enough really is good enough.

  • You use AI assistants or agents in your daily work, and have good judgment about what they should and should not be allowed to touch.

  • Strong coding skills to automate your work and read application code (Python, Bash, or similar).

  • You have mentored engineers or led a team or project, and you explain technical trade-offs clearly to developers and non-technical colleagues in English.

A plus if you

  • Have migrated workloads from a PaaS to a cloud provider.

  • Have worked on systems where uptime and latency really matter, such as trading or energy systems.

  • Have built up or led an infrastructure, platform, or SRE team.

  • Have worked with security and compliance frameworks such as NIS2, the Cbw or ISO 27001.

Not meeting every requirement? Please apply anyway. We value learning potential as much as exact experience (guideline: about 10+ years of professional experience, of which several in infrastructure or DevOps).



or