Staff Infrastructure Engineer (Lisbon-Based)

1Global; São Paulo; Presencial; BRL 535 000 - 773 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Growth Opportunities

Major Transaction Exposure

Work with a Talented Team

Dynamic Work Environment

Professional Development

International Experience

Open Communication Culture

Get Things Done Attitude

Resumo da oferta

1GLOBAL is seeking a Staff Infrastructure Engineer to lead its OpenStack-based private cloud and Ceph infrastructure. The role focuses on designing, deploying, and operating large-scale, carrier-grade platforms across data centres, including bare-metal provisioning with Ironic and BMaaS.

You will guide IaC, networking, and Kubernetes on bare metal, while mentoring engineers and shaping architectural decisions in a fast-growing global telecom environment. Based in Lisbon with potential relocation.

Qualificações

• Minimum 8 years in infrastructure engineering with large-scale production platforms.
• Deep hands-on OpenStack cloud design, deployment, HA control planes, and lifecycle tooling.
• Proven Ceph deployment experience with CRUSH tuning and RGW at scale.
• Hands-on Ironic BMaaS for fleet-scale provisioning and integration with Nova or standalone BMaaS.
• Strong Linux systems engineering in enterprise environments (Red Hat/ Rocky Linux or similar).
• Expert networking knowledge: OVN/OVS, BGP/EVPN, VXLAN, SR-IOV, DPDK.
• Kubernetes on bare metal and OpenStack, including service mesh and CSI storage.
• Terraform, Ansible, Packer; configuration management experience.
• Strong Python and Go scripting; problem-solving and leadership in architecture decisions.

Responsabilidades

• Architect and evolve private cloud using OpenStack across regions and data centers.
• Lead large Ceph clusters, including tiering, replication, and lifecycle upgrades.
• Operate Ironic-based BMaaS with hardware enrollment, deployment, and provisioning at fleet scale.
• Drive data center expansion, reference architectures, and capacity models.
• Set IaC standards with Terraform, Ansible, Packer and OpenStack tooling.
• Define SDN/Networking strategy, including High-performance datapaths and EVPN/BGP integration.
• Architect Kubernetes on bare metal and OpenStack with service mesh and CSI storage.
• Drive capacity planning, performance benchmarking, and cost modelling.
• Ensure security/compliance with CIS, GDPR, ISO 27001; collaborate with Security/SRE.
• Provide technical leadership, RFCs, and cross-functional architecture reviews.
• Serve as deepest escalation for incidents and perform root-cause investigations.

Conhecimentos

OpenStack

Ceph

Ironic / BMaaS

Linux

Networking

Kubernetes

Terraform

Ansible

Packer

Python/Go

SRE / Observability

Ferramentas

Kolla-Ansible

OpenStack-Ansible

Ceph

Prometheus

Grafana

Istio

Descrição da oferta de emprego

About Us 1GLOBAL is a technology-driven global mobile communications provider, delivering global connectivity solutions to enterprises and consumers. Powered by a best-in-class telecom platform - including its own owned and operated global mobile core network, fully fledged in-house developed eSIM technology, and an extensive portfolio of telecom licenses - 1GLOBAL operates as a fully regulated telecommunications provider across 40 countries worldwide. We serve many of the world’s leading banks, enterprises, and digital-first businesses, including neo-banks, global fast moving consumer goods companies, travel leaders, and payment service providers. Today, 1GLOBAL connects more than 70 million people and devices globally, enabling our customers to launch, scale, and innovate with confidence in the mobile ecosystem. 1GLOBAL is a profitable, fast-growing business. With full-year revenues in 2025 exceeding US$200 million and profits of over US$25 million, we generate strong cash flows to fund our growth allowing us to continuously invest in infrastructure, platform innovation, and global expansion. Recent years have marked a defining phase in our journey, with major enterprise and mass-consumer client wins accelerating our evolution into a global mobile connectivity powerhouse, purpose-built to enable consumer brands to enter and succeed with their own aspirations to offer telecommunications services to their clients. Founded in 2022 by experienced technology entrepreneurs, Hakan Koç and Pyrros Koussios, 1GLOBAL has rapidly emerged as a European technology leader shaping the future of global telecommunications. We operate as a fully regulated Mobile Virtual Network Operator (MVNO) in 12 countries and as a regulated telecom operator in an additional 28 markets. Headquartered in the Netherlands, with world-class R&D hubs in Lisbon, Berlin, and São Paulo, our team of close to 500 experts across 15 countries is united by a single ambition: to redefine global mobile connectivity through technology, scale, and execution excellence. About the Team We are looking for a Staff Infrastructure Engineer to join our Technology Department and set the technical direction for our private cloud and bare-metal platforms. This is a senior individual contributor role for an engineer who has architected, built, and operated large-scale OpenStack and Ceph environments in production, and who wants to shape the foundation of a global, carrier-grade infrastructure. This role is based in Lisbon; Candidates may start from a local office and relocate to Lisbon at a later stage. A willingness to relocate to Lisbon in the future is required.

About the Role

• Architect and Evolve the Private Cloud: Own the end-to-end architecture of our OpenStack-based private cloud (Nova, Neutron, Cinder, Glance, Keystone, Placement, Octavia, Designate) across multiple regions and data centres.
• Lead Ceph at Scale: Design, deploy, and operate large Ceph clusters, tiering, replication strategy, performance tuning, and lifecycle upgrades.
• Operate Bare Metal as a Service: Architect and operate an Ironic-based BMaaS platform integrated with OpenStack and/or Kubernetes, covering hardware enrolment, inspection, image deployment, network provisioning, and lifecycle management at fleet scale.
• Data Centre Expansion: Lead the technical design of new data centre buildouts, and bare-metal automation, defining reference architectures, hardware standards, and capacity models.
• Infrastructure as Code: Set the standards for IaC across the platform using Terraform, Ansible, Packer, and configuration management - including OpenStack lifecycle tooling (e.g. Kolla-Ansible, OpenStack-Ansible, Charmed OpenStack, etc).
• Networking Architecture: Define the SDN strategy (OVN/OVS), tenant networking, provider networks, BGP/EVPN integration with the underlay, and high-performance datapaths (SR-IOV, DPDK) for latency-and throughput-sensitive workloads.
• Kubernetes on Bare Metal: Architect Kubernetes platforms running on Ironic-provisioned hardware and OpenStack, including service mesh, CNI selection, and integration with Ceph CSI for persistent storage.
• Performance, Capacity, and Cost: Drive capacity planning, performance benchmarking, and TCO modelling for compute, storage, and bare-metal fleets - ensuring efficient resource utilisation and predictable scaling.
• Reliability and Operability: Partner with the SRE team to define SLIs/SLOs for platform services, design failure domains, validate disaster recovery, and ensure operational maturity of every new component introduced.
• Security and Compliance: Work closely with Security to harden the platform end-to-end - secure boot, image signing, IAM (Keystone federation, OIDC, LDAP/AD), tenant isolation, and compliance with CIS, ISO 27001, and GDPR.
• Technical Leadership: Mentor senior and mid-level engineers, lead design reviews, write RFCs and architecture decision records, and represent Infrastructure in cross-functional technical forums.
• Support and Troubleshooting: Act as the deepest escalation point for the platform; participate in on-call for critical incidents, lead complex root-cause investigations across compute, storage, and network layers.

Requirements

• Experience: Minimum 8 years in infrastructure engineering, with a track record of architecting and operating large-scale production platforms.
• OpenStack Expertise: Deep, hands-on experience designing, deploying, and operating production OpenStack clouds - including upgrades, HA control plane design, multi-region topologies, and at least one major lifecycle tooling stack (Kolla-Ansible, OpenStack-Ansible, or equivalent).
• Ceph Expertise: Proven experience operating Ceph clusters in production, including CRUSH design, performance tuning, troubleshooting OSDs/MONs/MDS, RGW at scale, and Ceph version upgrades.
• Ironic / BMaaS: Hands-on experience with Ironic for bare-metal provisioning at fleet scale, including driver selection (IPMI, Redfish), inspection, cleaning, deployment workflows, and integration with Nova or standalone BMaaS use cases.
• Linux Expertise: Expert-level Linux systems engineering on Red Hat / Rocky Linux (or similar), including kernel tuning, networking stack, storage subsystem, and performance analysis.
• Networking: Deep understanding of high-performance and SDN networking - OVN/OVS, BGP/EVPN, VXLAN, SR-IOV, DPDK, NFV, and L2/L3 protocols (TCP/IP, BGP, OSPF, DNS).
• Kubernetes & Containerization: Strong experience with Kubernetes, Helm, and service mesh technologies (e.g. Istio), including running Kubernetes on bare metal and on OpenStack.
• Infrastructure as Code: Expert in Terraform, Ansible, and Packer; experience with at least one configuration management system (Puppet, Salt, or equivalent).
• System Architecture: Strong knowledge of hardware (CPU, memory, NUMA, NICs, RAID, HBA, NVMe, iSCSI, Fibre Channel, Ethernet) and the ability to translate hardware characteristics into platform design decisions.
• Security & Compliance: Experience with system hardening, compliance frameworks (CIS, GDPR, ISO 27001), and IAM systems (Keystone federation, OpenLDAP, Active Directory, PAM).
• Monitoring & Observability: Expert in Prometheus, Grafana, Alertmanager, and Loki; experience in instrumenting OpenStack and Ceph specifically.
• Scripting & Programming: Proficient in Python and Go for platform-level automation and tooling; strong Bash for operational work.
• Storage Technologies: Deep knowledge of SDS, distributed storage trade-offs, and data protection strategies (backup, snapshots, disaster recovery, geo-replication).
• Technical Leadership: Demonstrated ability to lead architecture decisions, mentor senior engineers, and drive consensus across teams without direct management authority.
• Problem-Solving: Strong problem-solving mindset and ability to lead complex investigations under pressure.

Benefits

• Growth Opportunities: Advance your career in one of the fastest growing telecommunications companies, expanding over 100% year-on-year under the leadership of successful tech entrepreneurs.
• Major Transaction Exposure: Be in the driver's seat for transactions that will have an impact on the future telco industry.
• Work with a Talented Team: From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors, and constantly being exposed to talented and driven individuals.
• Dynamic Work Environment: Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution counts.
• Professional Development: Work alongside industry experts to enhance your skills and knowledge in a cutting-edge field.
• International Experience: Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the company.
• Open Communication Culture: Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environment.
• Get Things Done Attitude: Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry.

1GLOBAL is an equal opportunity employer, we value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. We are excited for you to join our mission to revolutionise connectivity globally.