Platform & Security Engineer at Atlys in Delhi HQ

Job description

About Atlys Our mission is to enable every person on Earth to travel freely. Travel should feel exciting. Instead, too much of it is still defined by paperwork, uncertainty, and processes that were never designed for travellers. Atlys is changing that. We're building an AI-first platform that removes friction and uncertainty from travel. To date, we've processed visas for 1M+ travellers across 127 countries. But we're still early. We’re now building AI-native products too, including agents that act on behalf of travellers. The Role We're looking for a Platform & Security Engineer to own the foundations that keep Atlys fast, reliable and secure. Not someone who simply keeps servers running or closes tickets from a scanner. We're looking for someone who treats infrastructure and security as products: who designs systems that are secure by default, automates away toil, and gives every engineer a paved road to ship safely. Few companies handle data as sensitive as ours. Passports, financial documents, photographs and identity records flow every day between travellers, partners and government systems across 127 countries. You'll own the cloud infrastructure, security posture and reliability of the platform that processes it, and make sure it scales as we grow. You’ll be the second engineer on our Infra & Security team. That means real ownership from week one: you’ll take over large parts of our infrastructure and security roadmap, not a narrow slice of it. We don’t expect you to have done all of this before. We care far more about strong fundamentals and the ability to figure things out. You’ll have AI tools at your disposal and the room to learn whatever you haven’t touched yet. The Job • Own our cloud infrastructure. Run and improve our Kubernetes platform on GCP (with some workloads on AWS). Make deployments repeatable and fast with multi-stage CI/CD, container promotion and GitOps. • Make the platform observable and reliable. Bring logs, metrics and traces into one place, set up alerting that people trust, and take part in on-call and incident response. Keep an eye on cloud cost and catch anomalies early. • Run our data layer. Own database performance optimizations, backups and access automation, along with caching and our messaging infrastructure. • Lock down access. Enforce least-privilege IAM across cloud, Kubernetes and GitHub. Run zero-trust access to internal services, SSO, and clean offboarding. • Protect sensitive data. Design and harden access controls and audit logging for PII such as passports, financial documents and identity records. • Build security into how we ship. Add SAST, DAST, dependency and container scanning, and SBOMs to CI/CD. Run vulnerability management and coordinate pentests. Find and validate application security issues (authorization, authentication, business logic, injection), drive fixes with service owners, and fix directly where it makes sense. • Secure our AI products. Threat-model and harden AI agents and assistants that act on users’ behalf: prompt injection, tool and OAuth scope permissions, data leakage between users, and secrets handling. The Ideal Candidate You'll likely thrive in this role if you: • Have 4+ years of experience in infrastructure, DevOps, security engineering, ideally at a product company handling sensitive or regulated data. • Have strong fundamentals in Linux, networking (DNS, TLS, HTTP, load balancing), containers and Kubernetes, and at least one public cloud. • Understand security fundamentals (identity and access, encryption, secrets management, the OWASP Top 10) and have applied them in production, not just on paper. • Are strong in either infrastructure or security, and genuinely want to get good at the other. • Take ownership end to end. You make pragmatic trade-offs between security, speed and developer experience. You explain risk clearly and bring engineers along rather than acting as a gatekeeper. • Can write code to automate your way out of problems (Python,