TechOps Engineering Lead - Madrid or Barcelona

Location: Barcelona or Madryd, hybrid.

We're hiring on behalf of a data platform in commodity trading the reference product in its category, used by trading desks to make pre-trade decisions.

• $42M Series B raised in February 2025
• ~130 people, offices in Switzerland, London and Spain
• Strong pivot into AI, and building a Forward Deployed Engineer function for enterprise clients
• Growing the Spain engineering hub through 2026

The engineering bar is high: senior generalists with real ownership, the kind of team you'd find in an early-stage Stripe or Palantir. Fast-moving, verbal culture, low bureaucracy.

The role:

You'll own and set the direction for the technology that enables and protects the company: internal tooling, security, identity and access, devices, networking and day-to-day support.

This is a greenfield mandate. You're the technical owner of the workplace technology estate hands-on, but also setting the standards, choosing the tools and defining the processes.

You'll work closely with the infra teams that run production systems. You're comfortable around cloud and networking (AWS, VPNs, DNS). You're an engineer at heart.

The role spans both ends of the spectrum. You'll shape the roadmap, standards, budget and vendor relationships and you'll be genuinely hands-on, because no task is too small. Some days that means redesigning how internal VPNs should work. Other days it's boxing up a laptop for a new joiner, or managing a security incident. You're happy doing both.

What you'll do:

Design the identity layer. Own Entra ID end to end SSO, Conditional Access, MFA — and make joiner-mover-leaver run itself. Corporate access to AWS is federated through this layer, so it sits close to production.

Automate the toil away. Scripting against the Microsoft Graph API, zero-touch device deployment through Intune and Apple Business Manager, and provisioning that scales without adding headcount. If you're doing it twice by hand, you're building it wrong.

Set the standards. Choose the tools, define the processes, own the roadmap, budget and vendors. You're the technical owner of the estate, not the person implementing someone else's decisions.

Build your team. Own TechOps staffing you decide what the function needs as the company scales, and you hire and lead the people to deliver it.

Own internal security. Access, MFA and endpoint hardening enforced through Entra and Intune. No CISO above you this is yours, and it matters to a business selling data into trading desks.

Keep it running. Office network, VPN, senior escalation for the hard tickets, and the practical end when it's needed because in a team this size, no task is too small.

What we're looking for:

Essential

• You like to build. You get more out of designing something from scratch than running what already exists. Automating a process gives you more satisfaction than closing a ticket — and you'd rather fix the root cause than resolve the same issue twice.
• 5+ years taking things from 0 to 1. You've owned a function, not just a queue. You've built the standards, chosen the tools, set the roadmap and you've done it in a scale-up where nobody handed you a playbook.
• The technical foundation. Hands-on Microsoft Entra ID (SSO, Conditional Access, MFA, identity lifecycle) and Microsoft Intune. Solid Microsoft 365 / Exchange Online. Networking fundamentals DNS, VPNs, Wi-Fi, firewalls. Comfortable around AWS. Scripting and automation in PowerShell, Bash or Python, ideally against the Microsoft Graph API.
• You thrive across international teams. Fluent English is non-negotiable you'll be working daily across hubs in Switzerland, London and Spain, with an engineering-heavy user base and a fast, verbal culture.e