DevOps & Infrastructure Engineer (m/f/d) — Reliability & Compliance

Frankfurt, Germany · On-site

Who are we?

We are Exaloan, a FinTech based in Frankfurt, Germany, specializing in AI-based credit analytics. We provide professionally managed access to diversified portfolios of loans originated by FinTech and alternative lenders across Specialty Finance, SME and Consumer sectors. We operate a global digital lending marketplace at the intersection of asset management, software development, machine learning and generative AI, with the ambition to drive innovation in one of the fastest-growing sectors in finance. And we are unstoppable to reach our goals.

Location — please read before applying

This is a full-time, on-site role based in our office in the heart of Frankfurt. You must already live within commuting distance of Frankfurt, or be genuinely ready to relocate here before you start, and you must be authorized to work in Germany. We work together in the office; this is not a remote or majority-remote position. Please apply only if an on-site Frankfurt role is what you are looking for.

Who are we looking for?

We are looking for a DevOps and Infrastructure Engineer to own the systems and processes that let us scale safely. As our platform grows, so does the number of services, pipelines and lending integrations behind it — and the standard to which a regulated, institutionally-backed business is held. Your job is to raise the whole estate to a consistent, well-documented, audit-ready baseline: reliable AWS infrastructure, uniform CI/CD, and the security and compliance controls that our investors, auditors and clients expect.

We are a small team, so this is a hands-on role: much of your time will go to the immediate operational issues that keep a growing platform running. The upside is breadth — you will see, and be responsible for, many different parts of the stack rather than a narrow slice of it. You will work closely with the founding team, who set the standard and back your judgment, and take on more ownership as you establish it. If you like bringing order to a fast-moving estate — and writing it down so it stays ordered — this is your role.

Your role

You will collaborate directly with founding partners who are seasoned experts across the domains integral to our work: capital markets, portfolio management, banking law, software engineering, machine learning and generative AI.

From your first day, you will own our AWS infrastructure and our CI/CD standard, and drive the operational side of our ISO 27001 and DORA work — the controls, the evidence, and the documentation that make our engineering demonstrably sound.

Tech stack

AWS (ECS, Lambda, S3, CloudWatch, IAM), AWS CDK, Docker, Bitbucket Pipelines, Python, ArangoDB. Our reference services already run a full gated pipeline — tiered tests, a coverage floor, a supply-chain dependency audit and a review gate; your job is to make that the norm across the estate, not the exception.

Key responsibilities

• Own AWS infrastructure and Infrastructure as Code. Account structure, deployment, networking, secrets, and cost across the estate — provisioned as code (IaC), not by hand.
• Raise the CI/CD baseline across a growing estate we’re scaling and standardizing. Our reference pipeline sets the bar; you will bring more of our services onto consistent pipelines — PR gates, tests in CI, coverage floors, supply-chain audits — in priority order, so our engineering standard scales with us.
• Own reliability: monitoring, logging, alerting, backup and recovery, and the operational health of the platform. The unglamorous, load-bearing work that keeps a financial platform trustworthy.
• Operationalize security and compliance. Drive the day-to-day of ISO 27001 and DORA: change-management evidence, access controls, and audit artifacts. Coordinate external security testing — introduce SAST/DAST tooling on the code we build ourselves, and help scope and schedule independent penetration testing — and turn findings into tracked, remediated work. You need not be a career security specialist, but you can operationalize a control and produce the evidence for it.
• Own operational resilience and incident response — ICT incident management and reporting, resilience testing, and business-continuity readiness. This is the operational core of DORA: we must both withstand disruption and be able to evidence that we can.
• Document the estate. Runbooks, deployment and recovery procedures, architecture decisions, onboarding guides. Turn tribal knowledge into repeatable, written process — this is a first-class deliverable of the role, not an afterthought.
• Support the engineering team with the infrastructure, pipelines and tooling their work runs on.

Your profile

• At least 2 years of professional experience in a relevant DevOps, infrastructure, or platform-engineering role.
• Strong hands-on experience with AWS and Infrastructure as Code (CDK, CloudFormation or Terraform), containerization (Docker, ECS/Lambda), and deployment automation.
• Real depth in CI/CD — you can design and build pipelines and gates from scratch (Bitbucket Pipelines, GitHub Actions, GitLab CI or similar), not just edit an existing one.
• Solid operational security hygiene: IAM, secrets management, network segmentation, dependency and supply-chain risk.
• Exposure to a compliance regime — ISO 27001, SOC 2, DORA or GDPR. You do not need to be an auditor, but you can translate a control into infrastructure and evidence.
• Excellent technical writing. Clear documentation is a core requirement of this role; you take pride in leaving a trail others can follow.
• Comfortable owning the gates, reviews and standards that hold the whole estate to a consistent quality bar — and keen to grow into greater ownership of them.
• Comfortable in an AI-assisted engineering environment and interested in using those tools to manage a large estate.
• Scripting in Python and familiarity with ArangoDB or other NoSQL databases is advantageous.
• Experience in FinTech or another regulated environment is a plus.
• Exceptional written and verbal communication skills in English.
• Based in the Frankfurt area or ready to relocate, and authorized to work in Germany (see Location, above).

What we offer

• A dynamic, fast-growing business — we are scaling up in one of the fastest-growing sectors in finance.
• Professional and experienced team.
• International environment and network.
• Central office in the heart of Frankfurt.
• Direct involvement in the entire trajectory of the firm.
• The possibility to grow and scale your role along the growth of Exaloan.
• 30 days of annual leave.
• A Deutschlandticket to make your commute easier.
• Access to Corporate Benefits (via Mitarbeiterangebote.de) for discounts on shopping, travel, and more.
• A learning and certification budget (e.g. AWS and other professional certifications).
• Modern equipment.

How to apply

Send your CV and a short note confirming that you are applying for a full-time, on-site role in Frankfurt to hr@exaloan.com. Our process is a first call (covering the role, location, and relocation), a technical interview, and a final conversation with the founding team. We share the salary range for this role on request, and discuss it during the first call.

Exaloan is an equal-opportunity employer. We welcome applications from all qualified candidates regardless of gender, age, ethnicity, religion, disability, sexual orientation, or background.

We hire for talent; hence you will be able to develop your role according to your personal goals and position yourself where you can make the biggest impact and contribution.

If you think you are a good fit for our team, send your application now!