Sovereign Infrastructure Operations Engineer

The role

You will take operational ownership of secure bare-metal infrastructure, virtualization platforms, and production Kubernetes environments. This includes maintaining a dedicated air gapped collaboration platform under strict European information security frameworks.

What you will do

• Manage configuration state across physical and virtual assets using GitOps with Infrastructure as Code tools
• Maintain and support production Kubernetes clusters in restricted environments
• Administer secure platform core services including Mattermost, Nextcloud, Keycloak, and OpenBao
• Run weekly meetings for change management and vulnerability management with stakeholders
• Maintain technical security controls to satisfy Katakri, VS-NfD, and related European frameworks
• Maintain secure infrastructure networking and identity integrations
• Execute backup and disaster recovery procedures and routine hardware maintenance

Required qualifications

• 5+ years hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, with a focus on Linux environments
• Practical experience running and maintaining production Kubernetes clusters
• Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching
• Practical knowledge of Katakri, VS-NfD, or equivalent European security/compliance frameworks (ISO 27001, NIS2)
• Solid understanding of enterprise networking fundamentals (VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, PKI)
• Eligibility to obtain and maintain a high-level national security clearance in Finland

Nice to have

• Experience with Ceph or ZFS storage systems
• Experience with at least one Infrastructure as Code tool (Ansible, Terraform, or Puppet)
• Experience with Keycloak, Vault, or internal PKI management
• Familiarity with Kubernetes operations specifically in secure or air-gapped environments

Benefits

• Continuous professional development
• Training opportunities

Before you apply

• Employment is subject to applicable security screening (incl. SUPO, where required)
• TA Screen (30 mins)
• Interview with Hiring Manager (30 mins)
• Technical Deep-Dive Interview with Team (60 mins)
• Stakeholder & Security Alignment Interview (30 mins)

About the company

ICEYE is the world leader in sovereign intelligence from space. They own the world's largest and most advanced SAR satellite constellation.