Senior Network & Security Engineer (w/m/x/d)

MILES Mobility; Berlin; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Mobility credits/Deutschlandticket

Urban Sports Club membership

Office & Home flexi-work

Pension plan

Growth opportunities

Social impact program

Job summary

Miles Mobility in Berlin is seeking a senior security professional to own the network and security posture end to end. You will design and run cloud networks, manage identity and access, and harden the platform while coordinating vulnerability management and incident response.

You will work with Linux, containers, and CI pipelines, and contribute to audits and security questionnaires. Fluent English and eligibility to work in Germany are required.

Qualifications

• 5+ years running production networks and security for an online service, with on-call experience.
• Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPNs, firewalls in cloud and office networks.
• Identity engineering: OIDC and SAML single sign-on, MFA rollout, access reviews.
• Security operations: vulnerability scanning, log analysis, incident handling, post-incident write-ups.
• Comfortable with Linux, containers and CI pipelines; able to read code.

Responsibilities

• Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity, zero-trust access.
• Own identity and access: SSO, MFA, roles and least-privilege across cloud, tools and apps.
• Harden the platform: firewall/WAF policy, TLS/certificate lifecycle, secrets management, host/container baselines.
• Run vulnerability management, lead incident response with clear write-ups.
• Keep network/security config as code, reviewed and deployed via CI.
• Monitor for abuse/outages and set actionable alerts.
• Support audits and customer security questionnaires with evidence.
• Effectively deploy and use AI agents.

Skills

5+ years of experience

Networking fundamentals

OIDC & SAML SSO

Linux & containers

CI pipelines

GDPR & ISO27001

English proficiency

Tools

Terraform

OpenTofu

Job description

Join the ride!

You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.
This position is Berlin based.

Your Responsibility

• Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
• Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
• Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
• Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
• Keep all network and security configuration as code, reviewed and deployed through CI
• Monitor for abuse and outages, and set alerting that wakes people only when it should
• Support audits and customer security questionnaires with evidence that already exists
• Effectively deploy and use AI agents

Your Experience

• 5+ years running production networks and security for an online service, with on-call experience
• Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
• Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
• Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
• Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
• Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
• Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
• Fluent English, and eligible to work in Germany

Highly desired

• Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
• Zero-trust access tooling and web application firewalls in front of public services
• Secrets management and workload identity between CI and cloud, with no long-lived keys
• Securing payment flows and card data, and the compliance work that comes with them
• Daily use of AI coding agents, reviewing their output like any pull request

Nice to have

• A valid driving licence (EU category B or equivalent). Testing the product includes trips on the road.

Don't tick every box? Get in touch anyway. Your drive to learn and grow matters a lot to us.

Benefits

• Mobility: Choose between monthly MILES credits or the Deutschlandticket.
• Fitness: Enjoy a subsidized Urban Sports Club membership for your physical and mental well-being.
• Discounts: Access 1,500+ providers for discounts on sneakers, theater visits, and more.
• Home Office: Enjoy the flexibility of working from our office in Berlin and from home.
• Retirement: Secure your financial future with our attractive pension plan.
• Growth: We prioritize personal development through knowledge sharing and training opportunities (with the support from our HR Team and the Team Leads).
• Social Impact: We dedicate a portion of our revenue to support regional social projects, actively contributing to the well-being of society and the environment. #milescharity