Sovereign Infrastructure Operations Engineer

About the role

As a Sovereign Infrastructure Operations Engineer you will own the operational reliability, security and audit readiness of ICEYE’s secure bare‑metal and virtual infrastructure, including production Kubernetes environments that support an air‑gapped collaboration platform.

Key responsibilities

• Manage configuration state across physical and virtual assets using GitOps and IaC tools (Git/Gitlab, Ansible, Terraform, Puppet) to prevent drift.
• Maintain and support production Kubernetes clusters in restricted environments, handling upgrades, storage integration and registry management.
• Administer core secure services such as Mattermost, Nextcloud, Keycloak and OpenBao, ensuring integration with local IAM and storage.
• Run weekly change‑management and vulnerability‑management meetings with stakeholders.
• Implement and maintain technical security controls for Finnish Katakri, German VS‑NfD and European frameworks (NIS2, ISO 27001), including patching, hardening and access control.
• Maintain secure networking (VLAN isolation, mTLS, PKI) and coordinate identity integrations with network and security teams.
• Execute backup, disaster‑recovery and routine hardware maintenance across air‑gapped sites.

Required profile

• 5+ years hands‑on experience in systems administration, IT systems engineering or infrastructure operations, primarily on Linux.
• Practical experience running production Kubernetes clusters in secure or air‑gapped environments.
• Eligibility to obtain and maintain a high‑level national security clearance in Finland.

Required skills

• Expert‑level Linux administration (Debian/Ubuntu or RHEL/Rocky) and system hardening.
• Infrastructure as Code tools: Ansible, Terraform or Puppet.
• Version control: Git, Gitlab.
• Secure platform services: Mattermost, Nextcloud, Keycloak, OpenBao.
• Storage systems: Ceph or ZFS (nice to have).
• Networking fundamentals: VLAN segmentation, firewalls, DNS/DHCP, VPN, PKI.
• Knowledge of Katakri, VS‑NfD, ISO 27001, NIS2 compliance frameworks.