Senior Infrastructure & Platform Engineer

Stellenbeschreibung:

About Immich

Immich is on a mission to provide a secure and private home for your most precious memories through our high-performance, self-hostable photo and video backup solution. We are now taking the next step in our journey by building out our own cloud platform. Our initial cloud offering will be a fully managed backup service, secured with mandatory end-to-end encryption to ensure our users retain absolute privacy over their data. In the long term, we will also be looking to build our own full cloud-hosted Immich solution.

The Role

We are seeking a versatile Senior Infrastructure & Platform Engineer who can work across the full stack of our cloud infrastructure—from bare-metal servers to the services running on them. This is a unique opportunity to shape the future of our cloud services, combining hands-on infrastructure work with platform and application-level development. You’ll be working in a small team to build our infrastructure from the ground up on our own hardware clusters while also contributing to the services and tooling that power our cloud offering.

The Team

You’ll collaborate with the two existing members of the FUTO Backups team on building out our cloud services. We operate as a fully remote team distributed across the USA, Europe, and Asia, with a collaborative culture built on async communication. We’re looking for someone who thrives with this level of responsibility and can confidently contribute towards the technical direction. As we grow our cloud offerings beyond the initial E2EE backup service, you’ll play a pivotal role in scaling both our infrastructure and the services that run on it.

What You’ll Do

Design, deploy, and manage highly available infrastructure on bare-metal servers rented from partners like Hetzner.
Architect and implement a robust, production-grade Kubernetes environment to host our cloud services.
Develop backend services, APIs, and internal tooling that integrate with our infrastructure and support the cloud platform.
Evaluate and implement storage solutions appropriate for our E2E encrypted backup service, considering performance, scalability, and reliability.
Develop and automate infrastructure provisioning, configuration management, and deployment pipelines using Infrastructure as Code (IaC) principles.
Ensure the security and integrity of our platform, with a strong focus on end-to-end encryption and key management.
Monitor, troubleshoot, and optimise the performance of our infrastructure and services.
Document our architecture, processes, and best practices.

What We’re Looking For

A team player who communicates well and values others’ input.
An individual contributor who is excited and highly self-motivated.
Strong experience with Linux/UNIX systems and networking fundamentals.
Practical experience deploying and managing Kubernetes clusters, ideally on bare-metal infrastructure.
Backend development experience—comfortable writing services, scripts, and tooling (language flexible, though Typescript experience is a plus).
Proficiency with infrastructure automation tools; we use Terraform.
A solid understanding of security principles, including encryption, key management, and access control.
A proactive and investigative mindset, with the ability to independently research and recommend the best technical solutions.
Excellent problem-solving skills and the ability to work effectively in a remote, async-first environment.

-e to Have

Experience with distributed storage systems such as Ceph.
Familiarity with backup tooling (we are currently looking at Restic).
Experience running services on hardware providers like Hetzner or OVH.
Familiarity with Kubernetes architecture, including networking (CNI), storage (CSI), and security best practices.