Senior DevOps / Platform Engineer - Secure Infrastructure (f/m/d)

We are looking for a Senior DevOps / Platform Engineer (f/m/x) to build and run secure infrastructure for customers with high requirements on confidentiality, isolation and control, including public-sector and critical-infrastructure organisations.

You will build and operate our secure environments across cloud and on-premises, make our products deployable in isolated customer environments, and help our engineers ship models and services securely.

This is a hands-on role with high ownership. You'll shape how our most security-sensitive systems are built, run and audited.

LiveEO is a team that thrives on big challenges and fast learning cycles. We move quickly, stay curious, and genuinely enjoy building together. We're on a mission to break the "curse of Earth Observation": turning incredible satellite data into reliable, actionable decisions that people can trust and use in real operations.

Cross functional collaboration:

You'll be part of LiveEO's Information Security & Sovereign Operations team. You'll work closely with our ML, data and software engineers to ship their models and services securely, align with our Infrastructure team on standards and tooling, and work with our security and compliance colleagues on audits and certifications. At customer sites, you'll work with customer IT and security teams to get our systems deployed and running.

Tech stack & tools, which potential candidate will work with:

• Cloud: AWS (EC2, S3, IAM, VPC, EKS, Aurora/PostgreSQL), multi-account setups

• Infrastructure as Code: Terraform, Ansible

• Containers & orchestration: Docker, Kubernetes

• CI/CD: GitLab

• Workloads: Prefect (workflow orchestration), Anyscale/Ray (distributed compute)

• Access: Teleport, Tailscale, AWS SSO

• On-prem: Linux servers, incl. GPU compute for ML workloads

• Observability: Prometheus, Grafana

• Scripting: Python, Bash

• Build secure cloud environments: design and run isolated, access-controlled cloud environments with Infrastructure as Code, separated storage and compute, and need-to-know access.

• Operate on-premises infrastructure: run our on-prem compute environment end to end: hardening, patching, access management, audit logging, backups and GPU workloads.

• Enable deployments in isolated environments: make our products deployable outside our cloud, including offline installation, updates without internet access and reproducible builds; support engineers deploying into customer-operated networks.

• Security and compliance: implement and document technical controls in line with BSI IT-Grundschutz and ISO 27001, and support audits and certifications.

• Incident readiness: build logging, monitoring and forensic readiness so that incidents can be detected, investigated and documented.

• Raise the bar: set practices for secure deployment, secrets management and least-privilege access that other engineers can follow.

Must-haves

• 5+ years in DevOps, platform or systems engineering.

• Strong experience with Terraform and Infrastructure-as-Code concepts.

• In-depth knowledge of AWS, including IAM, networking and multi-account setups.

• Strong Linux administration skills, including system hardening and operating bare-metal servers.

• Experience with Docker and Kubernetes.

• Experience building CI/CD pipelines (ideally GitLab).

• Solid understanding of networking (TCP/IP, VPNs, firewalls, segmentation).

• Scripting and automation in Python and Bash.

• A security mindset: least privilege, secrets management, auditability.

• Fluent English and German

• Willingness to work on-site in Berlin, travel occasionally to customer sites, and undergo a German security clearance (Sicherheitsüberprüfung).

Soft skills

• You take ownership and proactively push work forward.

• You communicate clearly and collaborate smoothly within and across teams, including with customers.

• Pragmatic mindset: you balance security with getting things done.

• You document what you build so others can rely on it.

• AWS and/or Terraform certifications.

Nice to have

• Experience with air-gapped or offline environments.

• Experience in regulated environments (e.g. public sector, KRITIS, finance).

• Private cloud experience (e.g. OpenStack).

• Operating GPU servers or ML infrastructure, including workload schedulers.

• Familiarity with BSI IT-Grundschutz or ISO 27001.

• Observability with Prometheus, Grafana or similar.

• AWS and/or Terraform certifications.

• The opportunity to create a product that can improve business processes and lives across the globe.
• Flexible working hours and hybrid work model - we trust our employees to get their work done while maintaining a healthy work-life balance.
• We empower employees to drive their own career development, take initiative and have the freedom to be creative and bold.
• Not an overtime culture - we take care that overtime is done only as a necessity and always offset with time off and rest.
• A collaborative and learning environment - frequent internal workshops, knowledge sharing sessions, journal clubs and hackathons.
• Office located in the centre of Berlin Kreuzberg with free fruit, nuts and drinks.
• Potential to participate in the employee stock option program.
• Urban Sports membership and BVG subsidy, corporate pension program.
• A diverse and vibrant international environment of 30+ different nationalities.