Platform Engineer - Product Development & Delivery

DHI; Hørsholm; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

DHI is seeking a hands-on Platform Engineer to own the MUSE Platform. You will drive standardization, build a containerized stack, and secure and validate deployments at customer sites.

The role blends architecture with hands-on commissioning, ensuring a repeatable baseline for offshore wind monitoring systems. You will advance the observability stack, implement robust backup and HA strategies, and contribute to platform documentation.

Qualifications

• Proxmox virtualization and Linux administration experience.
• Docker / Docker Compose services management and recovery.
• Networking knowledge including VLANs, firewalls, VPN, jump-host access.
• IAM tooling such as FreeIPA / FreeRADIUS / Keycloak, MFA, RBAC.
• Hardware-level work and documentation-first approach.
• Able to travel to site installations as needed.
• Delivery discipline with FAT/SAT evidence and setup docs.

Responsibilities

• Develop and standardize the current MUSE Platform baseline.
• Build and maintain container platform, image registry and reproducible deploys.
• Advance observability with Prometheus, Loki, Grafana and exporters.
• Improve backup, HA patterns and recovery workflows.
• Install and configure platform at customer projects and ensure OT/SCADA integration when required.
• Lead platform validation during FAT/SAT and produce supporting evidence.
• Capture learnings to create standardized images, scripts and docs.

Skills

Linux administration

Proxmox operation

Docker / Docker Compose

Networking / OT

IAM tooling / MFA / RBAC

Hardware-level familiarity

Documentation-first approach

Travel to site installations

Delivery discipline

Tools

Proxmox

Docker

Job description

About MUSE

MUSE is DHI's integrated offshore wind bird- and bat-monitoring and decision-support system. It combines radar, cameras and video trackers with a MUSE server, NAS/storage, networked power and connectivity equipment, and integration toward customer wind-farm systems. It detects and classifies birds (and, at night, bats), assesses collision risk, and issues Shutdown-on-Demand recommendations to the customer's SCADA/WTG system - while the final turbine-control decision stays with the customer.

MUSE is delivered as a fully integrated, DHI-managed system: DHI installs, configures, secures and maintains it on the customer's site. It runs continuously, unattended and offline by design (air-gapped, no internet dependency), primarily on offshore installations in the North Sea and Baltic Sea. The product's non-negotiable qualities are trustworthy data, compliance-readiness, and operational reliability.

About MUSE

MUSE is DHI's integrated offshore wind bird- and bat-monitoring and decision-support system. It combines radar, cameras and video trackers with a MUSE server, NAS/storage, networked power and connectivity equipment, and integration toward customer wind-farm systems. It detects and classifies birds (and, at night, bats), assesses collision risk, and issues Shutdown-on-Demand recommendations to the customer's SCADA/WTG system - while the final turbine-control decision stays with the customer.

MUSE is delivered as a fully integrated, DHI-managed system: DHI installs, configures, secures and maintains it on the customer's site. It runs continuously, unattended and offline by design (air-gapped, no internet dependency), primarily on offshore installations in the North Sea and Baltic Sea. The product's non-negotiable qualities are trustworthy data, compliance-readiness, and operational reliability.

The platform and application

• The Platform - the infrastructure, runtime, connectivity, security, observability and recovery layer that sits between the MUSE software and the physical hardware/sensors. Everything needed to run MUSE reliably offshore and connect it to operators and customer systems.
• The Application - the MUSE software and its features (radar ingest, tracking, AI species classification, collision risk, drone detection, alerting, the Visualiser, and supporting services).

The role

You will own and advance the MUSE Platform on two fronts. First, at a product level, you will help develop, standardize and harden the platform baseline as MUSE matures from a project-by-project approach into a single, consistent, productized platform. Second, at a delivery level, you will implement and commission that platform in real customer projects - building, deploying, securing and validating MUSE installations.

The platform is actively being streamlined: a inconsistent virtualization and cybersecurity/network setup is being replaced with a standardized baseline on Proxmox, Docker, a segmented and hardened network, and a consistent observability, backup and recovery approach. Several standards - identity tooling, exact security-level allocation, and the full redundancy/DR scope - are still being finalized. Part of this role is helping shape and standardize them, not just operate a fixed system.

What You'll Do

• Develop and standardize the current MUSE Platform baseline: Proxmox virtualization, a Linux MUSE VM running containerized core services, and a Windows Server VM for vendor tooling (e.g. Kepware) where SCADA integration is required.
• Build and maintain the container platform (Docker / Docker Compose), including internal image registry, tagging/versioning conventions, and reproducible restore/redeploy from images and manifests.
• Advance the observability stack (Prometheus, Loki, Grafana, exporters, cAdvisor): dashboards, alerting, health checks and heartbeats across compute, network, power and security devices.
• Improve backup, recovery and high-availability patterns (Proxmox / PBS, NAS, encrypted DB and config backups, Proxmox HA, failover/restore testing).
• Implement the platform at customer delivery projects: cabinet/server build-out, network and power (UPS/PDU) setup, connectivity to field sensors (radar, cameras, video trackers), and integration toward customer systems.
• Support project-dependent OT/SCADA integration via OPC-UA / KepServerEX where required.
• Lead platform validation during FAT/SAT and commissioning - SSH access checks, Grafana and Visualiser availability, device reachability, power checks, and backup/restore/NAS verification - and produce and maintain the supporting evidence.
• Feed delivery learnings back into the product baseline: standardized images, scripts, and setup documentation that reduce the gap between customer commitments and repeatable delivery.

What You Bring

• Strong Linux administration and hands-on Proxmox operation.
• Comfort operating Docker / Docker Compose services (restart, isolation, restore/redeploy).
• Knowledge of network and OT/industrials, including: VLANs, firewalls, VPN, jump-host access.
• Familiarity with IAM tooling (FreeIPA / FreeRADIUS / Keycloak-class), MFA and RBAC.
• Familiarity with working close to the hardware level.
• A methodical, documentation-first approach to developing and maintaining the product and it’s implementation in client projects.
• Willingness to occasionally travel to site installations for testing.
• Delivery discipline: producing and maintaining FAT/SAT evidence, standardized images, scripts and setup documentation.

Nice to have

• OT/SCADA connectivity experience (OPC-UA, KepServerEX; bridging Modbus, Siemens, Allen-Bradley).
• Windows Server administration for vendor/OT tooling.
• Backup, recovery and HA experience with Proxmox / PBS, NAS and failover/restore testing.
• Knowledge of IEC 62443 / NIS2 concepts.
• Experience productizing infrastructure from bespoke project setups into a standardized baseline.
• Experience with air-gapped / offline-first environments.

Why this role stands out

You get to both define the platform standard and prove it in the field. If you like moving between architecture and hands-on commissioning - and want your delivery experience to directly shape the product - this is the seat with the widest scope.

Prepared from internal MUSE product, platform, architecture and services documentation. Some standards and scopes are still being finalized and may vary by project.