Senior Network & Security Engineer (w/m/x/d)

Free resume; Berlin; Hybrid; EUR 53,000 - 59,000; Full time

Benefits offered by this job

Deutschlandticket

Urban Sports Club

Discounts

Home Office

Retirement plan

Growth opportunities

Social impact

Job summary

Free resume is seeking a Senior Network & Security Engineer to own our platform's network and security posture end-to-end, from cloud environments to on-prem/offices, with strong focus on trusted access and incident response.

The role demands deep networking fundamentals, hands-on cloud networking, IAM, IaC, and governance knowledge. You will work in a remote-capable setup with Berlin offices, supporting audits and evolving security practices.

Qualifications

• Must have 5+ years running production networks and security for an online service with on-call experience.
• Strong networking fundamentals: TCP/IP, DNS, TLS, routing, VPNs, and firewalls across cloud and office networks.
• Hands-on with at least one major cloud provider's networking and IAM, plus IaC like Terraform or OpenTofu.
• Identity engineering in practice: SSO (OIDC/SAML), MFA rollout, role design and access reviews.
• Security operations: vulnerability scanning, log analysis, incident handling, post-incident write-ups.
• Comfortable with Linux, containers, CI pipelines, and reading code.
• Knowledge of GDPR and ISO 27001 audit requirements.
• Fluent English; eligible to work in Germany.

Responsibilities

• Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access.
• Own identity and access: SSO, MFA, roles and least-privilege across cloud, tools and apps.
• Harden the platform: firewall/WAF policy, TLS and certificate lifecycle, secrets management, baseline enforcement.
• Run vulnerability management from scan to fix and lead security incident response.
• Keep network and security config as code, deployed via CI pipelines.
• Monitor for abuse and outages; set alerts to wake the right people.
• Support audits and security questionnaires with existing evidence.
• Effectively deploy and use AI agents.

Skills

Production networks

Security operations

Cloud networking

IaC (Terraform/OpenTofu)

Identity and access management

Linux & containers

GDPR & ISO27001 knowledge

English fluency

On-call experience

Tools

Terraform

OpenTofu

Job description

Senior Network & Security Engineer (w/m/x/d)

Job Description

Join the ride!

You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.

Your Responsibility

• Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
• Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
• Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
• Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
• Keep all network and security configuration as code, reviewed and deployed through CI
• Monitor for abuse and outages, and set alerting that wakes people only when it should
• Support audits and customer security questionnaires with evidence that already exists
• Effectively deploy and use AI agents

Your Experience

• 5+ years running production networks and security for an online service, with on-call experience
• Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
• Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
• Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
• Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
• Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
• Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
• Fluent English, and eligible to work in Germany

Highly desired

• Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
• Zero-trust access tooling and web application firewalls in front of public services
• Secrets management and workload identity between CI and cloud, with no long-lived keys
• Securing payment flows and card data, and the compliance work that comes with them
• Daily use of AI coding agents, reviewing their output like any pull request

Nice to have

• A valid driving licence (EU category B or equivalent). Testing the product includes trips on the road.

Don't tick every box? Get in touch anyway. Your drive to learn and grow matters a lot to us.

• Mobility: Choose between monthly MILES credits or the Deutschlandticket.
• Fitness: Enjoy a subsidized Urban Sports Club membership for your physical and mental well-being.
• Discounts: Access 1,500+ providers for discounts on sneakers, theater visits, and more.
• Home Office: Enjoy the flexibility of working from our office in Berlin and from home.
• Retirement: Secure your financial future with our attractive pension plan.
• Growth: We prioritize personal development through knowledge sharing and training opportunities (with the support from our HR Team and the Team Leads).
• Social Impact: We dedicate a portion of our revenue to support regional social projects, actively contributing to the well-being of society and the environment. #milescharity

Remote full-time en 53,000-59,000 EUR/yr