Staff Infrastructure Engineer (Lisbon-Based)

1global; Lisboa; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Growth opportunities

International experience

Open communication culture

Dynamic work environment

Job summary

1GLOBAL is building a best-in-class private cloud platform across regions. You will own the OpenStack-based architecture, manage Ceph clusters, and architect Bare Metal as a Service integrated with Kubernetes.

You will mentor engineers, collaborate with DevOps, Security, and SRE leaders, and influence the technical roadmap to ensure scalable, reliable performance across data centers.

Qualifications

• 8+ years in infrastructure engineering with production-scale platforms.
• Experience designing deploying OpenStack clouds (HA control planes, multi-region).
• Ceph deployments at scale with CRUSH, OSDs, and RGW.
• Hands-on Ironic BMaaS provisioning and integration with OpenStack/Kubernetes.
• Strong Linux system engineering in enterprise environments.
• Deep networking knowledge (OVN/OVS, BGP/EVPN, SR-IOV).
• Terraform, Ansible, and Packer for IaC and automation.
• Security/compliance with CIS/GDPR/ISO 27001 and IAM (Keystone).
• Programming in Python/Go for platform tooling.

Responsibilities

• Architect and evolve private cloud across regions and data centers.
• Lead Ceph clusters, scaling, upgrades, and performance tuning.
• Design and operate BMaaS integrated with OpenStack/Kubernetes.
• Plan data center expansions, hardware standards, capacity models.
• Set IaC standards: Terraform, Ansible, Packer; OpenStack tooling.
• Define SDN strategy and high-performance datapaths.
• Architect Kubernetes on bare metal with Ceph CSI integration.
• Drive reliability with SLI/SLOs, DR, and incident investigations.

Skills

OpenStack

Ceph

Ironic / BMaaS

Linux

Networking

Kubernetes

Terraform

Ansible

Packer

Python

Tools

Kolla-Ansible

OpenStack-Ansible

Terraform

Ansible

Packer

Job description

Technology

Lisbon, Portugal

Madrid, Spain

Dublin, Ireland

Full-time

1GLOBAL is a technology-driven global mobile communications provider helping enterprises and consumer brands deliver seamless connectivity worldwide. Powered by a best-in-class telecom platform, proprietary eSIM technology, and its own mobile core network across 15 countries, 1GLOBAL operates as a fully regulated telecommunications provider in 43 countries.

Founded in 2022, 1GLOBAL has rapidly become one of Europe's fastest-growing telecom technology companies, connecting more than 80 million people and devices globally. Our customers include leading banks, multinational enterprises, global retailers, travel companies, payment service providers, and digital-first businesses.

About the Role

You will own the architecture and long-term technical strategy of our private cloud platform for compute and networking, distributed storage, and Metal as a Service (BMaaS). You will lead the design and rollout of new data center deployments, define the standards that the wider Infrastructure team builds to, and act as the technical authority on private cloud, distributed storage, and bare-metal automation across the organization. You will work hands-on while influencing the roadmap, mentoring senior engineers, and partnering with DevOps, IP Network, Security, and SRE leadership to ensure our platform scales reliably across regions.

• Architect and Evolve the Private Cloud: Own the end-to-end architecture of our OpenStack-based private cloud (Nova, Neutron, Cinder, Glance, Keystone, Placement, Octavia, Designate) across multiple regions and data centers.
• Lead Ceph at Scale: Design, deploy, and operate large Ceph clusters, tiering, replication strategy, performance tuning, and lifecycle upgrades.
• Operate Bare Metal as a Service: Architect and operate an Ironic-based BMaaS platform integrated with OpenStack and/or Kubernetes, covering hardware enrollment, inspection, image deployment, network provisioning, and lifecycle management at fleet scale.
• Data Center Expansion: Lead the technical design of new data center buildouts, and bare-metal automation, defining reference architectures, hardware standards, and capacity models.
• Infrastructure as Code: Set the standards for IaC across the platform using Terraform, Ansible, Packer, and configuration management - including OpenStack lifecycle tooling (e.g. Kolla-Ansible, OpenStack-Ansible, Charmed OpenStack, etc).
• Networking Architecture: Define the SDN strategy (OVN/OVS), tenant networking, provider networks, BGP/EVPN integration with the underlay, and high-performance datapaths (SR-IOV, DPDK) for latency- and throughput-sensitive workloads.
• Kubernetes on Bare Metal: Architect Kubernetes platforms running on Ironic-provisioned hardware and OpenStack, including service mesh, CNI selection, and integration with Ceph CSI for persistent storage.
• Performance, Capacity, and Cost: Drive capacity planning, performance benchmarking, and TCO modeling for compute, storage, and bare-metal fleets - ensuring efficient resource utilization and predictable scaling.
• Reliability and Operability: Partner with the SRE team to define SLIs/SLOs for platform services, design failure domains, validate disaster recovery, and ensure operational maturity of every new component introduced.
• Security and Compliance: Work closely with Security to harden the platform end-to-end - secure boot, image signing, IAM (Keystone federation, OIDC, LDAP/AD), tenant isolation, and compliance with CIS, ISO 27001, and GDPR.
• Technical Leadership: Mentor senior and mid-level engineers, lead design reviews, write RFCs and architecture decision records, and represent Infrastructure in cross-functional technical forums.
• Support and Troubleshooting: Act as the deepest escalation point for the platform; participate in on-call for critical incidents, lead complex root-cause investigations across compute, storage, and network layers.

Requirements

Must-haves

• Experience: Minimum 8 years in infrastructure engineering, with a track record of architecting and operating large-scale production platforms.
• OpenStack Expertise: Deep, hands-on experience designing, deploying, and operating production OpenStack clouds — including upgrades, HA control plane design, multi-region topologies, and at least one major lifecycle tooling stack (Kolla-Ansible, OpenStack-Ansible, or equivalent).
• Ceph Expertise: Proven experience operating Ceph clusters in production, including CRUSH design, performance tuning, troubleshooting OSDs/MONs/MDS, RGW at scale, and Ceph version upgrades.
• Ironic / BMaaS: Hands-on experience with Ironic for bare-metal provisioning at fleet scale, including driver selection (IPMI, Redfish), inspection, cleaning, deployment workflows, and integration with Nova or standalone BMaaS use cases.
• Linux Expertise: Expert-level Linux systems engineering on Red Hat / Rocky Linux (or similar), including kernel tuning, networking stack, storage subsystem, and performance analysis.
• Networking: Deep understanding of high-performance and SDN networking — OVN/OVS, BGP/EVPN, VXLAN, SR-IOV, DPDK, NFV, and L2/L3 protocols (TCP/IP, BGP, OSPF, DNS).
• Kubernetes & Containerization: Strong experience with Kubernetes, Helm, and service mesh technologies (e.g., Istio), including running Kubernetes on bare metal and on OpenStack.
• Infrastructure as Code: Expert in Terraform, Ansible, and Packer; experience with at least one configuration management system (Puppet, Salt, or equivalent).
• System Architecture: Strong knowledge of hardware (CPU, memory, NUMA, NICs, RAID, HBA, NVMe, iSCSI, Fiber Channel, Ethernet) and the ability to translate hardware characteristics into platform design decisions.
• Security & Compliance: Experience with system hardening, compliance frameworks (CIS, GDPR, ISO 27001), and IAM systems (Keystone federation, OpenLDAP, Active Directory, PAM).
• Monitoring & Observability: Expert in Prometheus, Grafana, Alertmanager, and Loki; experience in instrumenting OpenStack and Ceph specifically.
• Scripting & Programming: Proficient in Python and Go for platform-level automation and tooling; strong Bash for operational work.
• Storage Technologies: Deep knowledge of SDS, distributed storage trade-offs, and data protection strategies (backup, snapshots, disaster recovery, geo-replication).
• Technical Leadership: Demonstrated ability to lead architecture decisions, mentor senior engineers, and drive consensus across teams without direct management authority.
• Problem-Solving: Strong problem-solving mindset and ability to lead complex investigations under pressure.

Why 1GLOBAL?

• Growth Opportunities:Advance your career in one of the fastest growing telecommunications companies, expanding over 100% year-on-year under the leadership of successful tech entrepreneurs.
• Major Transaction Exposure:Be in the driver's seat for transactions that will have an impact on the future telco industry.
• Work with a Talented Team:From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors, and constantly being exposed to talented and driven individuals.
• Dynamic Work Environment:Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution counts.
• Professional Development:Work alongside industry experts to enhance your skills and knowledge in a cutting-edge field.
• International Experience:Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the company.
• Open Communication Culture:Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environment.
• Get Things Done Attitude:Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry.

1GLOBAL is an equal opportunity employer, we value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. We are excited for you to join our mission to revolutionise connectivity globally.

1GLOBAL is a trading name of 1GLOBAL Holdings B.V.