Senior Linux & Kubernetes Systems Engineer (Secure)

HireHi; Finland; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Job summary

ICEYE is seeking an experienced Systems Administrator to manage secure Linux-based infrastructure and production Kubernetes clusters. The role requires implementing configuration management with GitOps and IaC, and aligning with strict change policies across air-gapped or high-security sites.

The ideal candidate will demonstrate expert Linux administration, vulnerability patching, and strong networking skills including PKI, VPNs, and firewall rules.

Qualifications

• 5+ years of hands-on experience in systems administration or infrastructure operations.
• Proven ability to maintain production Kubernetes clusters in restricted environments.
• Expert-level Linux administration and system hardening.
• Knowledge of Katakri, VS-NfD, ISO 27001 or NIS2 compliance frameworks.

Responsibilities

• Manage configuration state across assets using GitOps and IaC in secure environments.
• Maintain secure platform core services and integrate with local IAM and storage.
• Run change and vulnerability management meetings with stakeholders.
• Maintain networking, PKI, DNS/DHCP, and VPN configurations.
• Perform backups, DR procedures, and hardware maintenance in air-gapped sites.

Skills

Systems administration

Kubernetes

Networking fundamentals

Security compliance

VLAN/firewalls/DNS-DHCP/VPN

Patch management

Linux hardening

National security clearance

Tools

GitOps

Infrastructure as Code

Kubernetes tooling

Keycloak/Nextcloud/Mattermost/OpenBao

Job description

ICEYE is seeking an experienced Systems Administrator to manage secure Linux-based infrastructure and production Kubernetes clusters. The role requires implementing configuration management with GitOps and IaC, and aligning with strict change policies across air-gapped or high-security sites.

The ideal candidate will demonstrate expert Linux administration, vulnerability patching, and strong networking skills including PKI, VPNs, and firewall rules.