The Context: Banking is built on trust. Porters has a solid AWS foundation running on CloudFormation, but as we scale, we must further improve our platform excellence and cybersecurity posture. This is a founding role with a dual focus on compliance architecture and platform/cloud engineering.

The Mission: You will own our infrastructure and security architecture end-to-end. You will lead the "Heavy Lift" of achieving certification (starting with  ISO27001) while further building out our networking layer that allows us to run secure workloads across AWS, Azure, and GCP.

This job is in person (Zurich, Switzerland) or remote (CET +/-3 hours).

Your Responsibilities

• Architect Cross-Cloud Workloads: Design and implement the networking to run cross-platform inference (e.g., calling Gemini in Vertex AI from AWS ECS)

• Evolve our AWS Stack: Augment our existing CloudFormation approach, e.g., accelerated deployment and improved CI/CD practices, multi-region replication/failover, auto-scaling, etc.

• Advanced Authentication: Build our Machine-to-Machine (M2M) inbound authentication layer for secure inbound calls from customer systems

• Compliance & DPO: Uphold our certification using Vanta, serve as the right hand of our Data Protection Officer (DPO), establish our BCP and Disaster Recovery plans

Your Profile

• Experience: 5+ years in SRE, DevOps, or Security Engineering, with a specific focus on fintech or regulated industries

• Cloud & Infrastructure Mastery: Deep mastery of AWS (ECS, RDS, IAM, VPC) and Infrastructure as Code (CloudFormation, Terraform). Proven experience setting up secure, cross-platform networking in Azure or GCP

• Security & Compliance: Direct experience guiding a startup through certification readiness and maintaining it (e.g., ISO27001, SOC2, PCI DSS). Familiarity with Vanta, Risk Registers, and implementing Business Continuity/Disaster Recovery plans

• Automation Mindset: Strong proficiency in Python for infrastructure automation and GitHub Actions for CI/CD. You are capable of implementing "Database as Code" and automated security scanning (SAST/DAST) into the pipeline