Senior Platform Engineer with Security Focus - Remote (Germany)

Mondoo; Berlin; Vor Ort; EUR 75.000 - 110.000; Vollzeit

Zusammenfassung

Mondoo is seeking a Platform Engineer to enhance security-focused infrastructure. You will build and optimize cloud environments using IaC, automate configurations, and integrate security policy as code into CI/CD workflows.

You will work with Terraform, CloudFormation, Kubernetes, and open policy frameworks to translate requirements into scalable controls while collaborating across teams. This role focuses on security automation and cloud-native operations.

Qualifikationen

• Hands-on IaC experience with Terraform or CloudFormation.
• Configuration management experience with Ansible, Puppet, or Chef.
• Cloud platform experience (AWS, Azure, or GCP).
• Experience with Docker and Kubernetes.
• Scripting in Python or Bash.
• Networking basics (TCP/IP, DNS).
• Experience with Git version control.
• Strong problem-solving and collaboration skills.
• Willingness to learn security policies and automation.
• Excellent communication skills.

Aufgaben

• Build, manage, and optimize cloud infrastructure using IaC tools.
• Automate system configurations with Ansible, Puppet, or Chef.
• Integrate infrastructure with CI/CD pipelines.
• Work with policy as code frameworks like Open Policy Agent or Sentinel.
• Translate security requirements into policy as code.
• Support automated security controls in Kubernetes and cloud environments.
• Stay updated on infra management and automation trends.

Kenntnisse

Platform engineering

Security engineering

Networking basics

Scripting (Python/Bash)

Tools

Terraform

CloudFormation

Ansible

Puppet

Chef

Docker

Kubernetes

Git

Open Policy Agent

Sentinel

Jobbeschreibung

Mondoo is creating a new way that helps companies keep their users and data safe from hackers around the world. We believe that a great user experience and visual design will help our users to love and enjoy our product and make it easier to take action against attackers.

Your impact

Key Responsibilities

We're seeking a talented Platform Engineer who is eager to enhance their expertise in security. This position offers the opportunity to work with cutting-edge technologies and gain hands-on experience in "policy as code" frameworks while contributing to our dynamic team.

• Build, manage, and optimize cloud infrastructure using Infrastructure as Code (IaC) tools like Terraform and CloudFormation.
• Automate system configurations using tools like Ansible, Puppet, or Chef.
• Collaborate with teams to ensure seamless integration of infrastructure with CI/CD pipelines.
• Gain experience working with policy as code frameworks (e.g., Open Policy Agent, HashiCorp Sentinel).
• Assist in translating high-level security requirements into practical policy as code implementation within cloud and on-premises environments.
• Support the implementation and scaling of automated security controls in Kubernetes, cloud environments (AWS, Azure, GCP), and operating systems.x5
• Stay updated on infrastructure management and automation trends, ensuring a robust and scalable system foundation

Required Qualifications

• Strong hands-on experience with IaC tools like Terraform or CloudFormation.
• Proficiency in configuration management tools such as Ansible, Puppet, or Chef.
• Solid understanding of at least one major cloud platform (AWS, Azure, or GCP) and its core services.
• Experience working with container technologies like Docker and orchestration tools like Kubernetes.
• Comfortable scripting in at least one language (e.g., Python, Bash, or similar).
• Knowledge of networking basics (TCP/IP, DNS, etc.).
• Experience with version control systems (e.g., Git).
• Strong problem-solving and analytical skills.
• Willingness to learn and grow into a role focused on security policies and automation.
• Excellent communication skills with the ability to work effectively in a collaborative team environment.

Preferred Qualifications

• Familiarity with security tools and concepts such as policy as code frameworks (Open Policy Agent, Sentinel).
• Knowledge of compliance standards (e.g., CIS, SOC 2, ISO 27001).
• Previous exposure to cloud-native security tools and services.
• Relevant certifications in cloud platforms (e.g., AWS, Azure, GCP).
• A keen interest in learning about security best practices, frameworks, and tools.