Senior DevOps/Platform Engineer, LiveEO

• 5+ years in DevOps, platform or systems engineering
• Strong experience with Terraform and Infrastructure-as-Code concepts
• In-depth knowledge of AWS, including IAM, networking and multi-account setups
• Strong Linux administration skills, including system hardening and operating bare-metal servers
• Experience with Docker and Kubernetes
• Experience building CI/CD pipelines (ideally GitLab)
• Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation)
• Scripting and automation in Python and Bash
• A security mindset: least privilege, secrets management, auditability
• Fluent English and German
• Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung)
• You take ownership and proactively push work forward
• You communicate clearly and collaborate smoothly within and across teams, including with customers
• Pragmatic mindset: you balance security with getting things done
• You document what you build so others can rely on it
• AWS and/or Terraform certifications

Desirable

• We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations
• You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely
• This is a hands-on role with high ownership. You'll shape how our most security-sensitive systems are built, run and audited
• LiveEO is a team that thrives on big challenges and fast learning cycles. We move quickly, stay curious, and genuinely enjoy building together
• We're on a mission to break the "curse of Earth Observation": turning incredible satellite data into reliable, actionable decisions that people can trust and use in real operations
• You'll be part of LiveEO's Information Security & Sovereign Operations team. You'll work closely with our ML, data and software engineers to ship their models and services securely, align with our Infrastructure team on standards and tooling, and work with our security and compliance colleagues on audits and certifications
• At customer sites, you'll work with customer IT and security teams to get our systems deployed and running
• As Senior DevOps / Platform Engineer, you will build and operate the infrastructure that lets us work with sensitive data and deliver to customers with the highest security requirements
• Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access
• Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads
• Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks
• Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications
• Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented
• Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow
• Tech stack & tools, which potential candidate will work with:
• Cloud: AWS (EC2, S3, IAM, VPC, EKS, Aurora/PostgreSQL), multi-account setups
• Infrastructure as Code: Terraform, Ansible
• Containers & orchestration: Docker, Kubernetes
• CI/CD: GitLab
• Workloads: Prefect (workflow orchestration), Anyscale/Ray (distributed compute)
• Access: Teleport, Tailscale, AWS SSO
• On-prem: Linux servers, incl. GPU compute for ML workloads
• Observability: Prometheus, Grafana
• Scripting: Python, Bash