Senior DevOps/Platform Engineer (Secure Infrastructure)

LiveEOBerlin

Stellenbeschreibung:

We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations
You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely
This is a hands-on role with high ownership. You’ll shape how our most security-sensitive systems are built, run and audited
LiveEO is a team that thrives on big challenges and fast learning cycles. We move quickly, stay curious, and genuinely enjoy building together
We’re on a mission to break the “curse of Earth Observation”: turning incredible satellite data into reliable, actionable decisions that people can trust and use in real operations
You’ll be part of LiveEO’s Information Security & Sovereign Operations team. You’ll work closely with our ML, data and software engineers to ship their models and services securely, align with our Infrastructure team on standards and tooling, and work with our security and compliance colleagues on audits and certifications
At customer sites, you’ll work with customer IT and security teams to get our systems deployed and running
As Senior DevOps / Platform Engineer, you will build and operate the infrastructure that lets us work with sensitive data and deliver to customers with the highest security requirements
Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access
Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads
Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks
Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications
Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented
Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow
Tech stack & tools, which potential candidate will work with:
Cloud: AWS (EC2, S3, IAM, VPC, EKS, Aurora/PostgreSQL), multi-account setups
Infrastructure as Code: Terraform, Ansible
Containers & orchestration: Docker, Kubernetes
CI/CD: GitLab
Workloads: Prefect (workflow orchestration), Anyscale/Ray (distributed compute)
Access: Teleport, Tailscale, AWS SSO
On-prem: Linux servers, incl. GPU compute for ML workloads
Observability: Prometheus, Grafana
Scripting: Python, Bash

Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation)
Strong experience with Terraform and Infrastructure-as-Code concepts
Scripting and automation in Python and Bash
Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung)
5+ years in DevOps, platform or systems engineering
Fluent English and German
Experience with Docker and Kubernetes
A security mindset: least privilege, secrets management, auditability
Experience building CI/CD pipelines (ideally GitLab)
In-depth knowledge of AWS, including IAM, networking and multi-account setups
Strong Linux administration skills, including system hardening and operating bare-metal servers
You take ownership and proactively push work forward
Pragmatic mindset: you balance security with getting things done
You document what you build so others can rely on it
AWS and/or Terraform certifications
You communicate clearly and collaborate smoothly within and across teams, including with customers
Experience with air-gapped or offline environments
Experience in regulated environments (e.g. public sector, KRITIS, finance)
Private cloud experience (e.g. OpenStack)
Operating GPU servers or ML infrastructure, including workload schedulers
Familiarity with BSI IT-Grundschutz or ISO 27001
Observability with Prometheus, Grafana or similar

#J-18808-Ljbffr