linux system administrator for sovereign infrastructure

HireHi; Finland; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Job summary

ICEYE is seeking an experienced Systems Administrator to manage secure Linux-based infrastructure and production Kubernetes clusters. The role requires implementing configuration management with GitOps and IaC, and aligning with strict change policies across air-gapped or high-security sites.

The ideal candidate will demonstrate expert Linux administration, vulnerability patching, and strong networking skills including PKI, VPNs, and firewall rules.

Qualifications

• 5+ years of hands-on experience in systems administration or infrastructure operations.
• Proven ability to maintain production Kubernetes clusters in restricted environments.
• Expert-level Linux administration and system hardening.
• Knowledge of Katakri, VS-NfD, ISO 27001 or NIS2 compliance frameworks.

Responsibilities

• Manage configuration state across assets using GitOps and IaC in secure environments.
• Maintain secure platform core services and integrate with local IAM and storage.
• Run change and vulnerability management meetings with stakeholders.
• Maintain networking, PKI, DNS/DHCP, and VPN configurations.
• Perform backups, DR procedures, and hardware maintenance in air-gapped sites.

Skills

Systems administration

Kubernetes

Networking fundamentals

Security compliance

VLAN/firewalls/DNS-DHCP/VPN

Patch management

Linux hardening

National security clearance

Tools

GitOps

Infrastructure as Code

Kubernetes tooling

Keycloak/Nextcloud/Mattermost/OpenBao

Job description

ICEYE provides persistent Earth monitoring and sovereign intelligence from space using the world’s largest and most advanced SAR satellite constellation. Its constellations support customers in defence and intelligence, environmental monitoring, insurance, and emergency management.

• Manage configuration state across physical and virtual assets using GitOps and Infrastructure as Code tools, reducing manual configuration drift in secure environments in line with strict change policies
• Maintain and support production Kubernetes clusters in restricted environments, including upgrades, storage integration, and registry management
• Administer secure platform core services, including Mattermost, Nextcloud, Keycloak, and OpenBao, covering deployment, upgrades, and integration with local IAM and storage
• Run weekly change management and vulnerability management meetings with infrastructure stakeholders
• Maintain technical security controls to meet Finnish Katakri, German VS-NfD, and related European frameworks, including NIS2 and ISO 27001, through patch management, hardening, and access control
• Maintain secure infrastructure networking and identity integrations in coordination with network and security teams
• Execute backup and disaster recovery procedures and routine hardware maintenance across air-gapped or high-security sites
• 5+ Years of hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, focused on Linux environments
• Practical experience running and maintaining production Kubernetes clusters
• Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching
• Practical knowledge of Katakri, VS-NfD, or equivalent European security and compliance frameworks, such as ISO 27001 and NIS2
• Solid understanding of enterprise networking fundamentals, including VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, and PKI
• Eligibility to obtain and maintain a high-level national security clearance in Finland
• Employment is subject to applicable security screening (incl. SUPO, where required)