About the Role
We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations. You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely.
Responsibilities
•Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access.
•Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads.
•Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks.
•Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications.
•Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented.
•Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow.
Requirements
•5+ years in DevOps, platform or systems engineering.
•Strong experience with Terraform and Infrastructure-as-Code concepts.
•In-depth knowledge of AWS, including IAM, networking and multi-account setups.
•Strong Linux administration skills, including system hardening and operating bare-metal servers.
•Experience with Docker and Kubernetes.
•Experience building CI/CD pipelines (ideally GitLab).
•Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation).
•Scripting and automation in Python and Bash.
•A security mindset: least privilege, secrets management, auditability.
•Fluent English and German.
•Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung).
•You take ownership and proactively push work forward.
•You communicate clearly and collaborate smoothly within and across teams, including with customers.
•Pragmatic mindset: you balance security with getting things done.
•You document what you build so others can rely on it.
Nice to Have
•Experience with air-gapped or offline environments.
•Experience in regulated environments (e.g. public sector, KRITIS, finance).
•Private cloud experience (e.g. OpenStack).
•Operating GPU servers or ML infrastructure, including workload schedulers.
•Familiarity with BSI IT-Grundschutz or ISO 27001.
•Observability with Prometheus, Grafana or similar.
•AWS and/or Terraform certifications.
What We Offer
•The opportunity to create a product that can improve business processes and lives across the globe.
•Flexible working hours and hybrid work model - we trust our employees to get their work done while maintaining a healthy work-life balance.
•We empower employees to drive their own career development, take initiative and have the freedom to be creative and bold.
•Not an overtime culture - we take care that overtime is done only as a necessity and always offset with time off and rest.
•A collaborative and learning environment - frequent internal workshops, knowledge sharing sessions, journal clubs and hackathons.
•Office located in the centre of Berlin Kreuzberg with free fruit, nuts and drinks.
•Potential to participate in the employee stock option program.
•Urban Sports membership and BVG subsidy, corporate pension program.
•A diverse and vibrant international environment of 30+ different nationalities.
