People connect their real bank accounts to LumaLedger. That trust is the product, and it is revocable in one afternoon. We already run tenant isolation at the database level, secret scanning on every commit, and a deletion path that reaps everything a user ever created — including the things Postgres cannot cascade.
You would own the whole of it: the platform, the posture, and the evidence. This role reports into engineering leadership and has a direct line to every decision that touches customer data.
What you would do
- Own our cloud footprint, CI/CD and the boring reliability work that keeps deploys uneventful.
- Harden tenant isolation and access control, and prove it with tests rather than assertions.
- Run our security programme: reviews, access audits, restore drills, vendor diligence, and the questionnaires enterprise partners send.
- Be the person who says no clearly, and then offers the version that works.
What we look for
- 5+ years across infrastructure and security, with production ownership.
- Deep Postgres and cloud fundamentals; comfortable with row-level security and least privilege.
- You have taken an organisation through a real audit or a real incident, and can describe what changed after.
Nice to have, never required
- SOC 2, PCI or open-banking compliance experience.
- You have written the runbook someone else was grateful for at 3am.
If you are on the fence
Every list above describes the person we imagine, not a checklist we score. People who meet most of it and want the rest have done extremely well here. If the role reads like the job you want next, that is enough reason to write to us — tell us which part you would have to grow into and we will be straight with you about whether it works.
Send whatever shows your work best — a CV, a repository, a portfolio, or a few paragraphs. A hiring manager reads every one, and you will hear back within two business days.
Apply by emailcareers@lumaledger.app