DevOps for secure infrastructure

LiveEO; Berlin; Ibrido; EUR 90.000 - 120.000; Tempo pieno

Vantaggi offerti da questo lavoro

Urban Sports membership

BVG subsidy

Corporate pension program

Stock option program

Descrizione del lavoro

LiveEO ищет старшего DevOps/Platform Engineer для проектирования и эксплуатации безопасной инфраструктуры для клиентов с высокими требованиями к конфиденциальности и контролю. Будете строить облачные и локальные среды, внедрять изолированные окружения и обеспечивать безопасные развёртывания, соответствие стандартам.

Требуется 5+ лет в DevOps, глубокие знания AWS, Terraform и Kubernetes, владение Linux, CI/CD (GitLab) и навыками разработки на Python/Bash.

Competenze

• 5+ лет в DevOps, platform или системной инженерии.
• Опыт Terraform и IaC.
• Глубокие знания AWS (IAM, сетевые аспекты, multi-account).
• Администрирование Linux, хардening, работа на bare-metal.
• Опыт Docker и Kubernetes.
• Опыт CI/CD (GitLab).
• Сетевые навыки (TCP/IP, VPN, firewalls).
• Scripting: Python и Bash.
• Безопасность: least privilege, управление секретами, аудитируемость.
• Свободное владение английским и немецким; готовность к работе в Берлине на месте; прохождение немецкой проверки безопасности.
• Ответственность, проактивность и коммуникабельность.

Mansioni

• Разработка и поддержка безопасной инфраструктуры в облаке и локально.
• Эксплуатация и безопасность изолированных сред, IaC и доступ по ролям.
• Развертывания вне облака, офлайн-установка и воспроизводимые сборки.
• Обеспечение соответствия BSI IT-Grundschutz и ISO 27001; поддержка аудитов.
• Мониторинг, логирование и подготовка к инцидентам.
• Установка лучших практик для безопасного развёртывания и управления секретами.

Conoscenze

Terraform/IaC

AWS (IAM, networking, multi-account)

Linux administration

Docker

Kubernetes

CI/CD (GitLab)

Networking (TCP/IP, VPNs, firewalls)

Python/Bash scripting

Security mindset & least privilege

English & German

Strumenti

GitLab

Prometheus

Grafana

Descrizione del lavoro

Описание: We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations. You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely.

Задачи:

• Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access.
• Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads.
• Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks.
• Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications.
• Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented.
• Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow.

Требования:

• 5+ years in DevOps, platform or systems engineering.
• Strong experience with Terraform and Infrastructure-as-Code concepts.
• In-depth knowledge of AWS, including IAM, networking and multi-account setups.
• Strong Linux administration skills, including system hardening and operating bare-metal servers.
• Experience with Docker and Kubernetes.
• Experience building CI/CD pipelines (ideally GitLab).
• Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation).
• Scripting and automation in Python and Bash.
• A security mindset: least privilege, secrets management, auditability.
• Fluent English and German Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung).
• You take ownership and proactively push work forward.
• You communicate clearly and collaborate smoothly within and across teams, including with customers.
• Pragmatic mindset: you balance security with getting things done.
• You document what you build so others can rely on it.

Будет плюсом:

• Experience with air-gapped or offline environments;
• Experience in regulated environments (e.g. public sector, KRITIS, finance);
• Private cloud experience (e.g. OpenStack);
• Operating GPU servers or ML infrastructure, including workload schedulers;
• Familiarity with BSI IT-Grundschutz or ISO 27001;
• Observability with Prometheus, Grafana or similar;
• AWS and/or Terraform certifications

Условия:

• The opportunity to create a product that can improve business processes and lives across the globe.
• Flexible working hours and hybrid work model - we trust our employees to get their work done while maintaining a healthy work-life balance.
• We empower employees to drive their own career development, take initiative and have the freedom to be creative and bold.
• Not an overtime culture - we take care that overtime is done only as a necessity and always offset with time off and rest.
• A collaborative and learning environment - frequent internal workshops, knowledge sharing sessions, journal clubs and hackathons.
• Office located in the centre of Berlin Kreuzberg with free fruit, nuts and drinks.
• Potential to participate in the employee stock option program.
• Urban Sports membership and BVG subsidy, corporate pension program.
• A diverse and vibrant international environment of 30+ different nationalities.