Full-Time
DevSecOps Engineer
Platform Engineering, Security & Observability
Posted on 10/31/2025
Valarian Technologies
11-50 employees
Data sovereignty infrastructure for enterprises
No salary listed
London, UK
Hybrid
Hybrid work arrangements are managed at team level.
 DevOps & Infrastructure (3) |
|---|
| , , |
- Develop and implement a comprehensive observability strategy for self-hosted deployments, including infrastructure and tooling for monitoring, alerting, and troubleshooting. This will involve designing and implementing robust metrics and logging systems.
- Engineer the Acra platform for high availability and fault tolerance. This includes ensuring resilience against Cloud Availability Zone outages and the ability to gracefully handle node failures.
- Guarantee 99.9% uptime for the platform's control plane and deployment management. Design and implement a disaster recovery plan with active/passive deployments and seamless failover capabilities.
- Architect and implement a highly available deployment setup for applications within the Acra platform. This will involve designing and building the infrastructure and processes necessary for continuous operation.
- Create and maintain robust backup and recovery strategies for all Valarian products, ensuring data integrity and minimal downtime in the event of a failure.
- Integrate and manage an incident detection and paging solution to ensure rapid response to critical issues and minimize service disruptions.
- Scale the Acra platform and applications to support large concurrent user bases (25+ users) and sustained daily usage. This will involve performance tuning, capacity planning, and optimization of resource utilization.
- Collaborate closely with the product engineering team to influence the design and implementation of new products and features, ensuring they meet our reliability and scalability standards from the outset.
- Bachelor’s degree (or foreign equivalent) in Computer Science or a related field is desired; relevant practical experience will also be considered.
- Proficiency with programming languages like Go, Bash, Python.
- Deep experience with Kubernetes security: RBAC, PodSecurityPolicies (or their replacements), Admission Controllers and Kubernetes network policies.
- Proficiency in secure networking practices, including TLS, mutual TLS (mTLS), ingress/egress controls and VPN tunneling configurations.
- Proven experience operating and securing service mesh technologies (e.g. Istio, Linkerd, or Consul Connect).
- Hands on experience with HashiCorp Vault in production, including dynamic secrets engines, auth backends and policy design.
- Practical knowledge of HAProxy or equivalent reverse proxies/load balancers, with experience configuring L4/L7 security protections.
- Familiarity with CVE triage workflows and integrating vulnerability scanners into CI/CD and registry workflows.
- Exposure to runtime security tooling (e.g. Falco, eBPF-based monitoring) and familiarity with basic incident response workflows.
- Comfort representing engineering in external calls with auditors, pentesters and security vendors; able to explain infrastructure decisions in security terms.
- Familiarity with compliance standards (SOC 2, ISO 27001, etc) and cloud security postures in AWS, Azure or GCP would be preferable but not essential.
Valarian Technologies provides data sovereignty infrastructure for enterprises and government institutions, giving control over where data lives, who can access it, and how it is tracked. It achieves this through data localization, granular access controls, and thorough auditability to keep data within chosen jurisdictions and provide verifiable records. This approach strengthens resilience against geopolitical and cyber threats by protecting privileged communications, IP, and trade secrets. The goal is to enable clients to innovate and compete globally with confidence while meeting sovereignty and compliance needs.
Company Size
11-50
Company Stage
Early VC
Total Funding
$18.6M
Headquarters
London, United Kingdom
Founded
2019
Simplify's Take
What believers are saying
- Scout Ventures and Artis Ventures co-led $7M funding, enabling Valarian Defence launch.
- Government partnerships expand with new deployment pathways for critical coordination infrastructure.
- Privileged Communication and External Comms Capture extend to government-grade compartmentalized systems.
What critics are saying
- Palantir's entrenched government relationships and classified certifications threaten defence contract wins.
- ITAR/EAR export controls may restrict international sales and require compliance restructuring.
- No disclosed government customers as of April 2026; pilot conversion remains unproven.
What makes Valarian Technologies unique
- ACRA platform enforces compartmentalized isolation and auditability for trust-failing environments.
- Founders' Palantir and U.S. Army backgrounds inform government-grade security architecture design.
- Dual-use capability spans regulated enterprises and national defence deployments seamlessly.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Dental Insurance
Vision Insurance
Disability Insurance
Unlimited Paid Time Off
Hybrid Work Options
401(k) Retirement Plan
401(k) Company Match
Company Equity
Relocation Assistance
Growth & Insights and Company News
6 month growth
↓ -6%1 year growth
↑ 0%2 year growth
↓ -3%Valarian, a London, UK-based provider of a platform for enforced isolation and compartmentalized infrastructure, raised $7M in funding
Data management startup Valarian, founded by Palantir alumni Max Buchan and Josh McLaughlin, has emerged from stealth, raising an additional $7 million, bringing its seed round to $20 million. The company focuses on secure data management with its ACRA platform, targeting government and defense sectors. The funding round was led by Scout Ventures and Artis Ventures, with participation from Gokul Rajaram. Valarian aims to expand into defense, leveraging its founders' experience.
Join top executives in San Francisco on July 11-12, to hear how leaders are integrating and optimizing AI investments for success. Learn More. For many zero-trust founders and their teams, their sales pipeline is now their financial lifeline. With venture funding cooling off in 2023, founders are re-evaluating and, in some cases, pushing back on the growth-at-all-costs mentality investors urged them to pursue just a few months ago.A Crunchbase query completed today shows that 342 cybersecurity-focused startups founded in January 2021 or later received $1.85 billion in funding. Startups founded in January 2022 or later number just 122, with total funding of $450 million. CB Insights’ The State of Venture in 5 Charts report is worth a read for anyone interested in the startup community. It quantifies the challenges all startup founders face, even those in hot areas like cybersecurity and zero trust
Messaging systems in today’s workplace have become as ubiquitous as email. In some cases, they’ve downright replaced it. Messengers are everywhere, and we’re all using them. And even though they offer end-to-end encryption, the underlying questions remain - who’s doing the encryption, where is the data sitting, who ultimately owns it, and crucially, are these platforms meeting increasingly strict compliance and regulatory issues?. Financial regulators in the US and UK aren’t joking around regarding the use of private messaging applications. The Securities and Exchange Commission, better known as the SEC, has handed out a total of $1.8 billion in fines across 16 US banking institutions
Last year, Microsoft launched a new product – Safe Links in Microsoft Defender for Office 365 – for Teams it claimed would protect users against potentially dangerous phishing URLs.