Staff Infrastructure Engineer (Lisbon-Based)

1global; Lisboa; Híbrido; EUR 120 000 - 160 000; Tempo integral

Resumo da oferta

1GLOBAL is seeking a Staff Infrastructure Engineer to own the architecture of its OpenStack-based private cloud across multiple regions and data centers. You will lead Ceph at scale, operate BMaaS, and drive data center expansion while mentoring senior engineers.

Collaborating with DevOps, IP Network, Security, and SRE leadership, you will ensure scalable, secure, and cost-efficient platforms; define IaC standards and drive reliability through SLIs/SLOs for platform services.

Qualificações

• 8+ years in infrastructure engineering with large-scale prod platforms.
• Deep hands-on OpenStack design, deployment, multi-region HA experience.
• Ceph clusters operation, CRUSH tuning, upgrades.
• Ironic/BMaaS provisioning at fleet scale with Nova integration.
• Linux expert in Red Hat/Rocky Linux with kernel and storage tuning.
• Strong networking with OVN/OVS, BGP/EVPN, SR-IOV, DPDK.
• Kubernetes on bare metal and OpenStack; service mesh knowledge.
• IaC expert in Terraform, Ansible, Packer; CM tools.
• Security/compliance: CIS, GDPR, ISO 27001; IAM systems.
• Leadership to guide architecture and mentor engineers.

Responsabilidades

• Architect and evolve the private cloud end-to-end across regions.
• Lead Ceph at scale for performance, replication, upgrades.
• Operate Bare Metal as a Service integrated with OpenStack/Kubernetes.
• Design data center expansions and reference architectures.
• Set IaC standards using Terraform, Ansible, Packer.
• Define SDN/networking strategies and high-performance datapaths.
• Kubernetes on bare metal with OpenStack integration.
• Drive capacity, performance, and cost optimization.
• Define SLIs/SLOs with SRE; ensure reliability and operability.
• Harden security and ensure CIS/GDPR/ISO 27001 compliance.
• Mentor engineers and lead architecture decisions.
• Handle on-call escalations and complex root-cause analysis.

Conhecimentos

OpenStack

Ceph

Ironic BMaaS

Linux

Networking SDN

Kubernetes

Terraform

Ansible

Packer

Python

Go

Monitoring

Security & compliance

Leadership

Troubleshooting

Ferramentas

Kolla-Ansible

OpenStack-Ansible

Puppet

SaltStack

Descrição da oferta de emprego

Technology

Lisbon, Portugal

Madrid, Spain

Dublin, Ireland

Full-time

1GLOBAL is a technology-driven global mobile communications provider helping enterprises and consumer brands deliver seamless connectivity worldwide. Powered by a best-in-class telecom platform, proprietary eSIM technology, and its own mobile core network across 15 countries, 1GLOBAL operates as a fully regulated telecommunications provider in 43 countries.

Founded in 2022, 1GLOBAL has rapidly become one of Europe's fastest-growing telecom technology companies, connecting more than 80 million people and devices globally. Our customers include leading banks, multinational enterprises, global retailers, travel companies, payment service providers, and digital-first businesses.

As a Staff Infrastructure Engineer, you will own the architecture and long-term technical strategy of our private cloud platform for compute and networking, distributed storage, and Metal as a Service (BMaaS). You will lead the design and rollout of new data center deployments, define the standards that the wider Infrastructure team builds to, and act as the technical authority on private cloud, distributed storage, and bare-metal automation across the organization. You will work hands-on while influencing the roadmap, mentoring senior engineers, and partnering with DevOps, IP Network, Security, and SRE leadership to ensure our platform scales reliably across regions.

About the Role

• Architect and Evolve the Private Cloud: Own the end-to-end architecture of our OpenStack-based private cloud (Nova, Neutron, Cinder, Glance, Keystone, Placement, Octavia, Designate) across multiple regions and data centers.
• Lead Ceph at Scale: Design, deploy, and operate large Ceph clusters, tiering, replication strategy, performance tuning, and lifecycle upgrades.
• Operate Bare Metal as a Service: Architect and operate an Ironic-based BMaaS platform integrated with OpenStack and/or Kubernetes, covering hardware enrollment, inspection, image deployment, network provisioning, and lifecycle management at fleet scale.
• Data Center Expansion: Lead the technical design of new data center buildouts, and bare-metal automation, defining reference architectures, hardware standards, and capacity models.
• Infrastructure as Code: Set the standards for IaC across the platform using Terraform, Ansible, Packer, and configuration management — including OpenStack lifecycle tooling (e.g. Kolla-Ansible, OpenStack-Ansible, Charmed OpenStack, etc).
• Networking Architecture: Define the SDN strategy (OVN/OVS), tenant networking, provider networks, BGP/EVPN integration with the underlay, and high-performance datapaths (SR-IOV, DPDK) for latency- and throughput-sensitive workloads.
• Kubernetes on Bare Metal: Architect Kubernetes platforms running on Ironic-provisioned hardware and OpenStack, including service mesh, CNI selection, and integration with Ceph CSI for persistent storage.
• Performance, Capacity, and Cost: Drive capacity planning, performance benchmarking, and TCO modeling for compute, storage, and bare-metal fleets — ensuring efficient resource utilization and predictable scaling.
• Reliability and Operability: Partner with the SRE team to define SLIs/SLOs for platform services, design failure domains, validate disaster recovery, and ensure operational maturity of every new component introduced.
• Security and Compliance: Work closely with Security to harden the platform end-to-end - secure boot, image signing, IAM (Keystone federation, OIDC, LDAP/AD), tenant isolation, and compliance with CIS, ISO 27001, and GDPR.
• Technical Leadership: Mentor senior and mid-level engineers, lead design reviews, write RFCs and architecture decision records, and represent Infrastructure in cross-functional technical forums.
• Support and Troubleshooting: Act as the deepest escalation point for the platform; participate in on-call for critical incidents, lead complex root-cause investigations across compute, storage, and network layers.

Requirements

Must-haves

• Experience: Minimum 8 years in infrastructure engineering, with a track record of architecting and operating large-scale production platforms.
• OpenStack Expertise: Deep, hands-on experience designing, deploying, and operating production OpenStack clouds — including upgrades, HA control plane design, multi-region topologies, and at least one major lifecycle tooling stack (Kolla-Ansible, OpenStack-Ansible, or equivalent).
• Ceph Expertise: Proven experience operating Ceph clusters in production, including CRUSH design, performance tuning, troubleshooting OSDs/MONs/MDS, RGW at scale, and Ceph version upgrades.
• Ironic / BMaaS: Hands-on experience with Ironic for bare-metal provisioning at fleet scale, including driver selection (IPMI, Redfish), inspection, cleaning, deployment workflows, and integration with Nova or standalone BMaaS use cases.
• Linux Expertise: Expert-level Linux systems engineering on Red Hat / Rocky Linux (or similar), including kernel tuning, networking stack, storage subsystem, and performance analysis.
• Networking: Deep understanding of high-performance and SDN networking — OVN/OVS, BGP/EVPN, VXLAN, SR-IOV, DPDK, NFV, and L2/L3 protocols (TCP/IP, BGP, OSPF, DNS).
• Kubernetes & Containerization: Strong experience with Kubernetes, Helm, and service mesh technologies (e.g., Istio), including running Kubernetes on bare metal and on OpenStack.
• Infrastructure as Code: Expert in Terraform, Ansible, and Packer; experience with at least one configuration management system (Puppet, Salt, or equivalent).
• System Architecture: Strong knowledge of hardware (CPU, memory, NUMA, NICs, RAID, HBA, NVMe, iSCSI, Fiber Channel, Ethernet) and the ability to translate hardware characteristics into platform design decisions.
• Security & Compliance: Experience with system hardening, compliance frameworks (CIS, GDPR, ISO 27001), and IAM systems (Keystone federation, OpenLDAP, Active Directory, PAM).
• Monitoring & Observability: Expert in Prometheus, Grafana, Alertmanager, and Loki; experience in instrumenting OpenStack and Ceph specifically.
• Scripting & Programming: Proficient in Python and Go for platform-level automation and tooling; strong Bash for operational work.
• Storage Technologies: Deep knowledge of SDS, distributed storage trade-offs, and data protection strategies (backup, snapshots, disaster recovery, geo-replication).
• Technical Leadership: Demonstrated ability to lead architecture decisions, mentor senior engineers, and drive consensus across teams without direct management authority.
• Problem-Solving: Strong problem-solving mindset and ability to lead complex investigations under pressure.

Why 1GLOBAL?

• Growth Opportunities:Advance your career in one of the fastest growing telecommunications companies, expanding over 100% year-on-year under the leadership of successful tech entrepreneurs.
• Major Transaction Exposure:Be in the driver’s seat for transactions that will have an impact on the future telco industry.
• Work with a Talented Team:From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors, and constantly being exposed to talented and driven individuals.
• Dynamic Work Environment:Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution counts.
• Professional Development:Work alongside industry experts to enhance your skills and knowledge in a cutting-edge field.
• International Experience:Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the company.
• Open Communication Culture:Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environment.
• Get Things Done Attitude:Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry.

1GLOBAL is an equal opportunity employer, we value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. We are excited for you to join our mission to revolutionise connectivity globally.

1GLOBAL is a trading name of 1GLOBAL Holdings B.V.