Jobs / LiveEO GmbH
Senior DevOps / Platform Engineer - Secure Infrastructure (f/m/d)
LiveEO GmbH · Berlin, BE, Deutschland
Berlin, BE, DeutschlandExp: 5+ yrsHybrid
Remuneration
Not specified
Location
Berlin, BE, Deutschland
Visa sponsorship
Not specified
Job summary
Build and operate secure cloud and on-premises infrastructure for sensitive data and customers with high confidentiality, isolation, and control requirements, including public-sector and critical-infrastructure organisations. The work includes isolated AWS environments, Infrastructure as Code, hardened Linux and GPU systems, offline customer deployments, security controls aligned with BSI IT-Grundschutz and ISO 27001, and incident monitoring and audit readiness.
Benefits
Flexible working hours and hybrid work modelOvertime is done only as a necessity and always offset with time off and restFrequent internal workshops, knowledge sharing sessions, journal clubs and hackaFree fruit, nuts and drinksPotential to participate in the employee stock option programUrban Sports membership and BVG subsidyCorporate pension program
Qualifications
- 5+ years in DevOps, platform or systems engineering.
- Strong experience with Terraform and Infrastructure-as-Code concepts.
- In-depth knowledge of AWS, including IAM, networking and multi-account setups.
- Strong Linux administration skills, including system hardening and operating bare-metal servers.
- Experience with Docker and Kubernetes.
- Experience building CI/CD pipelines (ideally GitLab).
- Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation).
- Scripting and automation in Python and Bash.
- A security mindset: least privilege, secrets management, auditability.
- Fluent English and German
- Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung).
Responsibilities
- design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access
- run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads
- make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds
- implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications
- build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented
- set practices for secure deployment, secrets management and least-privilege access that other engineers can follow
Skills
AnsibleAWSBashDockerEKSGitLabGrafanaIAMKubernetesLinuxOpenStackPostgreSQLPrometheusPythonS3TailscaleTerraform
Certifications
AWS and/or Terraform certifications
Languages
EnglishGerman
Work schedule
Flexible working hours
Travel
Travel occasionally to customer sites
Industry
Satellite analyticsEarth Observation
Company size
Around 160 employees
Security clearance
German security clearance (Sicherheitsüberprüfung)
Relocation
No