DevOps for secure infrastructure

Описание: We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations. You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely.

Задачи:

• Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access.
• Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads.
• Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks.
• Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications.
• Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented.
• Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow.

Требования:

• 5+ years in DevOps, platform or systems engineering.
• Strong experience with Terraform and Infrastructure-as-Code concepts.
• In-depth knowledge of AWS, including IAM, networking and multi-account setups.
• Strong Linux administration skills, including system hardening and operating bare-metal servers.
• Experience with Docker and Kubernetes.
• Experience building CI/CD pipelines (ideally GitLab).
• Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation).
• Scripting and automation in Python and Bash.
• A security mindset: least privilege, secrets management, auditability.
• Fluent English and German Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung).
• You take ownership and proactively push work forward.
• You communicate clearly and collaborate smoothly within and across teams, including with customers.
• Pragmatic mindset: you balance security with getting things done.
• You document what you build so others can rely on it.

Будет плюсом:

• Experience with air-gapped or offline environments;
• Experience in regulated environments (e.g. public sector, KRITIS, finance);
• Private cloud experience (e.g. OpenStack);
• Operating GPU servers or ML infrastructure, including workload schedulers;
• Familiarity with BSI IT-Grundschutz or ISO 27001;
• Observability with Prometheus, Grafana or similar;
• AWS and/or Terraform certifications

Условия:

• The opportunity to create a product that can improve business processes and lives across the globe.
• Flexible working hours and hybrid work model - we trust our employees to get their work done while maintaining a healthy work-life balance.
• We empower employees to drive their own career development, take initiative and have the freedom to be creative and bold.
• Not an overtime culture - we take care that overtime is done only as a necessity and always offset with time off and rest.
• A collaborative and learning environment - frequent internal workshops, knowledge sharing sessions, journal clubs and hackathons.
• Office located in the centre of Berlin Kreuzberg with free fruit, nuts and drinks.
• Potential to participate in the employee stock option program.
• Urban Sports membership and BVG subsidy, corporate pension program.
• A diverse and vibrant international environment of 30+ different nationalities.