• Design and maintain Exoscale’s operating systems and hypervisor fleets, from kernels to the network stacks, passing by security filtering layers • Contribute to the routing & security automation systems implementations • Help shape our operating system images strategy, from bare metal to Virtual Machines • Maintain and improve the system container runtimes • Improve our provisioning and deployment systems • Help improve bare metal and hypervisor systems performance • Contribute to the overall design and the architecture of the Exoscale platform systems • Contribute to internal tooling development • Improve our systems and processes to be scalable and highly available, helping achieve outstanding SLAs • Participate in code & changes reviews • Take part in the on-call roll after a training period

• Own, secure, and scale our infrastructure and deployment pipelines. • Embed security into our CI/CD workflows and manage vulnerabilities. • Ensure our financial trading systems are resilient, compliant, and highly available. • Design, maintain, and harden CI/CD pipelines across our delivery lifecycle. • Integrate automated security testing tools directly into development workflows. • Lead end-to-end vulnerability management, including triage and remediation tracking. • Audit existing infrastructure and deployment workflows to identify gaps, risks, or inefficiencies. • Contribute to disaster recovery, business continuity, and robust change management processes.

• Embed security practices across the entire SDLC - from code review through to production deployment; • Integrate and maintain security tooling in GitLab CI/CD pipelines, delivered as reusable templates rather than per-team bespoke work; • Detect and remediate security issues within infrastructure and CI/CD pipelines; harden merge and approval rules in GitLab; • Contribute to threat modeling practices and help teams apply them to their own designs; • Integrate and maintain tools for risk analysis, vulnerability detection, prevention, and remediation. • Operate and maintain Kubernetes clusters deployed both on-premises and in Cloud, ensuring high availability, scalability, and security; • Implement disaster recovery and high availability strategies across environments; • Automate operational workflows and infrastructure management via scripting (Bash, Python, Go); • Document infrastructure configurations, deployment procedures, and operational runbooks; • Focus on managing infrastructure with IaC tools (terraform/terragrunt), standardizing reusable GitLab CI/CD pipelines; • Use AI and purpose-built agents to analyze our multi-account, multi-cloud estate, correlating findings, misconfigurations and drift at a scale, to shorten time-to-fix; • Turn cross-account analysis into output the teams owning the affected workloads can act on directly; • Set the standards for using agentic tooling safely against production infrastructure - scoped permissions, guardrails and human review where it matters. • Design and enforce preventive controls across multiple cloud environments - organization-level deny and audit policies, SCPs, GCP Organization Policies, account factory standards; • Write infrastructure and policy as code using Terraform; scripting and automation are core to the day-to-day, not an occasional extra; • Build compliance drift detection, alerting, and run periodic compliance reviews with a focus on NIS2, DORA and GDPR obligations; • Manage cloud security posture - triage and drive remediation of findings from cloud security tools. • Build and maintain security monitoring, alerting and incident response playbooks; help consolidate cloud-native detections into a unified SIEM; • Implement observability: monitoring, alerting and logging to support proactive incident response; • Manage vulnerability assessments, coordinate remediation with development teams and track resolution against SLAs; • Support and coordinate periodic security audits and penetration testing activities; • Participate in production incident response and in the on-call rotation alongside the team.

Role Description Our client—a leading innovator in fintech, blockchain, cryptography, infrastructure, and security—is seeking a Tech Ops Manager to oversee internal systems and infrastructure for a remote-first, global team building the next generation of core banking systems. Reporting directly to the Chief Information Security Officer (CISO), this role requires a blend of strategic leadership and hands-on execution. The Tech Ops Manager will ensure the organization maintains a secure and efficient toolset, manages hardware logistics, oversees vendors, and upholds rigorous security and compliance standards. This position collaborates closely with Engineering, Security, and Operations teams to support ongoing international expansion. - Workspace & Systems Administration: Manage and optimize the global Google Workspace environment and maintain corporate IT solutions. - Device & Fleet Management: Scale and administer Mobile Device Management (MDM) solutions to maintain fleet-wide security, automation, and endpoint compliance. - Logistics & Procurement: Oversee vendor relations, software licensing, and hardware procurement, including the configuration and international shipping of equipment to employees. - Lifecycle & Identity Management: Lead the IT component of the employee lifecycle, ensuring seamless onboarding, access management, offboarding, and technical support across multiple time zones. - Compliance & Security: Maintain comprehensive IT documentation, playbooks, and runbooks to support ongoing SOC 1, SOC 2 Type II, ISO 27001, ISO 22301, and CCSS compliance initiatives. - Technical Support & Innovation: Assist international team members with technical issues and support the integration of internal AI tools and Model Context Protocol (MCP) connectors. Qualifications - 6+ years of dedicated experience in IT Management or internal systems administration. - Advanced proficiency in Google Admin, Google Workspace security tools, MDM solutions (e.g., Jamf), and endpoint security. - Proven experience managing IT infrastructure and logistics for a distributed, remote-first global workforce. - Strong knowledge of cybersecurity best practices and direct experience supporting SOC 2, ISO 27001, ISO 22301, or equivalent frameworks. - Pragmatic problem-solving ability balancing operational speed with strict security requirements; entrepreneurial drive to work independently and optimize workflows. - Full fluency in English with excellent written and verbal communication skills; proficiency in French is considered a strong plus. - Exposure to or experience working with internal AI tooling and integrations is a bonus. Requirements - 100% remote-first setup within a high-growth, cutting-edge technical domain. - Competitive compensation package tailored to experience and location. - Opportunity to work alongside industry experts in cryptography and fintech while shaping scalable IT governance. Interview Process - Initial Recruiter Screening - Introductory Call: 30-minute introductory discussion with the Co-CEO. - Cognitive & Behavioral Assessment: A 45-minute online evaluation (via TestGorilla) testing critical thinking, verbal reasoning, detail orientation, numerical reasoning, and problem-solving. - Panel Focus Interview: A 90–120 minute technical and cultural deep dive covering security fundamentals, compliance knowledge, work ethics, and team alignment. - Final Stage: Reference verifications and background checks. Commitment to Equality and Accessibility At MLabs, we are committed to offer equal opportunities to all candidates. We ensure no discrimination, accessible job adverts, and providing information in accessible formats. Our goal is to foster a diverse, inclusive workplace with equal opportunities for all. If you need any reasonable adjustments during any part of the hiring process or you would like to see the job-advert in an accessible format please let us know at the earliest opportunity by emailing human-resources@mlabs.city.