Senior DevOps/Platform Engineer (Secure Infrastructure)

LiveEO; Berlin; On-site; EUR 90,000 - 140,000; Full time

Job summary

LiveEO is seeking a Senior DevOps / Platform Engineer to build and run secure infrastructure for customers with high confidentiality, isolation, and control requirements. You will deploy secure cloud and on-prem environments, enable isolated deployments, and support audits in line with BSI IT-Grundschutz and ISO 27001.

You’ll collaborate with ML, data, and security teams to ship models and services securely, while ensuring least-privilege access, auditability, and reproducible builds for

Qualifications

• 5+ years in DevOps, platform or systems engineering.
• Fluent English and German.
• Experience with Docker and Kubernetes.
• Strong Linux administration and system hardening skills.
• Terraform and IaC concepts.
• CI/CD pipelines experience (GitLab preferred).
• On-site work in Berlin, German security clearance willingness.

Skills

DevOps

Linux admin

Python scripting

Bash scripting

Terraform/IaC

Docker

Kubernetes

CI/CD pipelines

AWS cloud

German language

Tools

Terraform

Ansible

GitLab

Docker

Kubernetes

Prometheus

Grafana

AWS

Linux

Job description

• We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations
• You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely
• This is a hands-on role with high ownership. You’ll shape how our most security-sensitive systems are built, run and audited
• LiveEO is a team that thrives on big challenges and fast learning cycles. We move quickly, stay curious, and genuinely enjoy building together
• We’re on a mission to break the “curse of Earth Observation”: turning incredible satellite data into reliable, actionable decisions that people can trust and use in real operations
• You’ll be part of LiveEO’s Information Security & Sovereign Operations team. You’ll work closely with our ML, data and software engineers to ship their models and services securely, align with our Infrastructure team on standards and tooling, and work with our security and compliance colleagues on audits and certifications
• At customer sites, you’ll work with customer IT and security teams to get our systems deployed and running
• As Senior DevOps / Platform Engineer, you will build and operate the infrastructure that lets us work with sensitive data and deliver to customers with the highest security requirements
• Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access
• Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads
• Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks
• Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications
• Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented
• Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow
• Tech stack & tools, which potential candidate will work with:
• Cloud: AWS (EC2, S3, IAM, VPC, EKS, Aurora/PostgreSQL), multi-account setups
• Infrastructure as Code: Terraform, Ansible
• Containers & orchestration: Docker, Kubernetes
• CI/CD: GitLab
• Workloads: Prefect (workflow orchestration), Anyscale/Ray (distributed compute)
• Access: Teleport, Tailscale, AWS SSO
• On-prem: Linux servers, incl. GPU compute for ML workloads
• Observability: Prometheus, Grafana
• Scripting: Python, Bash

• Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation)
• Strong experience with Terraform and Infrastructure-as-Code concepts
• Scripting and automation in Python and Bash
• Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung)
• 5+ years in DevOps, platform or systems engineering
• Fluent English and German
• Experience with Docker and Kubernetes
• A security mindset: least privilege, secrets management, auditability
• Experience building CI/CD pipelines (ideally GitLab)
• In-depth knowledge of AWS, including IAM, networking and multi-account setups
• Strong Linux administration skills, including system hardening and operating bare-metal servers
• You take ownership and proactively push work forward
• Pragmatic mindset: you balance security with getting things done
• You document what you build so others can rely on it
• AWS and/or Terraform certifications
• You communicate clearly and collaborate smoothly within and across teams, including with customers
• Experience with air-gapped or offline environments
• Experience in regulated environments (e.g. public sector, KRITIS, finance)
• Private cloud experience (e.g. OpenStack)
• Operating GPU servers or ML infrastructure, including workload schedulers
• Familiarity with BSI IT-Grundschutz or ISO 27001
• Observability with Prometheus, Grafana or similar