infrastructure engineer

Zentso is a software company specialising in association management technology. It builds and maintains CloudToolz, a SaaS platform extending iMIS RiSE with workflow automation, forms, analytics, CRM, CMS, and payment processing capabilities for professional associations and member-based organisations across multiple regions.

• Help manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions to support CloudToolz availability, performance, and scalability;
• Support CloudToolz releases built with ASP.NET Core and integrations with Dynamics, iMIS, Salesforce, and native CRM/CMS;
• Contribute to the Kubernetes migration, including deployments, scaling, network policies, and RBAC;
• Build and maintain a Grafana OSS observability stack with dashboards, alerting, and metrics, logs, and traces integrations;
• Assist with DNS, CDN, WAF, and DDoS protection through Cloudflare;
• Monitor system performance and participate in incident response and recovery;
• Maintain documentation, runbooks, and disaster recovery procedures;
• Write shell scripts and small infrastructure applications, including automation tools, monitoring utilities, and internal dashboards;
• Support identity and access management, endpoint protection, and vulnerability management;
• Help administer policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4;
• Contribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring and response;
• Support Microsoft 365 administration across Exchange Online, SharePoint, Teams, and Entra ID;
• Support Salesforce administration within scope;
• Share responsibility for endpoint security and password management configuration;
• Provide input on infrastructure scaling, architecture decisions, and the containerisation roadmap;
• Support infrastructure-as-code adoption and automate routine operations using PowerShell, shell scripting, and other languages;
• Contribute to sprint planning for environment-level requirements;
• Participate in the on-call rotation.

• 2+ Years of experience in IT infrastructure, cloud operations, systems administration, or DevOps;
• Hands-on operational experience with Windows Server 2022, SQL Server, MongoDB, and Redis;
• Practical experience with Cloudflare, including DNS, WAF, CDN, and security features;
• Working proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint;
• Hands-on Kubernetes experience with workload deployment, basic cluster operations, ingress, network policies, and RBAC;
• Solid understanding of networking fundamentals, including firewalls, VPNs, DNS, and access control;
• Working knowledge of GDPR and experience supporting compliance controls;
• Ability to write shell scripts and program in at least one modern language, such as Python, Go, C#, or JavaScript/TypeScript;
• Strong communication skills and ability to work independently within a distributed, multi-time-zone team;
• Nice to have: Grafana OSS, Prometheus, Loki, Docker, containerd, Helm, kubectl, MCSA, CompTIA Security+, CKA or equivalent, ISO 27001 audit/certification processes, PowerShell scripting, Terraform, Pulumi, Ansible, CI/CD, GitOps, Salesforce administration.

• Discretionary performance bonus based on individual and company performance;
• Employer pension contribution in line with local requirements;
• Flexible hours with availability for global coordination;
• On-call and out-of-hours escalation responsibilities;
• Six-month probation period;
• Remote-first position based in Berlin, Germany.