Senior Network & Security Engineer (w/m/x/d)
Own the end-to-end network and security posture of MILES' carsharing platform: design and run cloud networks (VPC, DNS, load balancing, VPN), manage identity and access (SSO, MFA, least privilege), harden the platform (WAF, TLS, secrets), and lead vulnerability management and incident response — all configuration kept as code deployed via CI. Core stack: public cloud networking/IAM, Terraform/Open
- Compensation
- Not disclosed
- Location
- Berlin, Germany
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years running production networks and security for an online service, with on-call experience
- Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on public cloud and physical office networks
- Hands-on with one major cloud provider's networking and IAM
- Hands-on with infrastructure as code such as Terraform or OpenTofu
- Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
- Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
- Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
- Working knowledge of GDPR and what a security audit such as ISO 27001 asks for
- Fluent English and eligible to work in Germany
Nice to have
- Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
- Zero-trust access tooling and web application firewalls in front of public services
- Secrets management and workload identity between CI and cloud, with no long-lived keys
- Securing payment flows and card data, and the compliance work that comes with them
- Daily use of AI coding agents, reviewing their output like any pull request
- A valid driving licence (EU category B or equivalent)
Full description
Join the ride!
You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.
This position is Berlin based.
Your Responsibility
- Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
- Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
- Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
- Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
- Keep all network and security configuration as code, reviewed and deployed through CI
- Monitor for abuse and outages, and set alerting that wakes people only when it should
- Support audits and customer security questionnaires with evidence that already exists
- Effectively deploy and use AI agents
Your Experience
- 5+ years running production networks and security for an online service, with on-call experience
- Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
- Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
- Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
- Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
- Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
- Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
- Fluent English, and eligible to work in Germany
Highly desired
- Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend