✔️ Основная цель: Кандидат должен уметь самостоятельно проводить сквозное end-to-end тестирование реальных пользовательских сценариев в банковском продукте на мобильных платформах (iOS и Android), web и backend, а не только проверять пользовательский интерфейс.
Задачи:
— Разработка и поддержание текущей инфраструктуры и CI/CD пайплайнов с использованием GitLab CI и ArgoCD
— Поддержка развертывания приложений в тестовой и продуктивной средах
— Настройка мониторинга и логирования, помощь в расследовании инцидентов
Требования:
— Опыт DevOps более 7 лет
— Уверенный практический опыт работы с AWS SDK, Kubernetes, Docker и Terraform
— Опыт работы с Helm, GitOps и инструментами мониторинга
— Практические знания Linux, сетевых технологий, скриптов на Shell или Python
— Английский язык уровня C1
Условия:
— Работа удаленная (часовые пояса UTC+2 to UTC+4)
Location: Kazakhstan
OUR HIRING PROCESS:
We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment.
We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team.
At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team.
From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.
INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our
Privacy Policy
INFUSE is looking for a
Senior DevOps Engineer
to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization.
We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
As part of our dynamic team, your responsibilities in this role will include:
Design, build and run secure
AWS infrastructure
(EC2 with Docker Compose, EKS) with
Terraform and Ansible
; move suitable workloads from EC2 to EKS
Build and maintain
CI/CD in GitHub Actions
; move remaining Jenkins jobs to GitHub Actions
Keep new and existing services at our security baseline:
Cloudflare proxy with WAF
and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
Own monitoring, alerting and logs on our standard stack (
Grafana, OpenTelemetry, Sentry
); on-call, incident response, post-incident reviews
Own backups and regular restore tests
Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
Work with internal teams and contractors
; set and enforce standards; mentor other engineers.
Our ideal candidate possesses the following skills:
5+ Years in DevOps / SRE:
Proven background operating mission-critical production environments, including
3+ years of hands-on experience running AWS
at scale
IaC & CI/CD Mastery:
Expert with
Terraform
, highly proficient with
Ansible
, and experienced in designing production workflows with
GitHub Actions
Containerization & Kubernetes:
Strong production experience with
Docker
and
Kubernetes
(specifically managed AWS
EKS
and
Helm
)
Production Security & Incident Management:
Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and
Cloudflare WAF/proxy
configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
English proficiency
at
B2 level or higher
.
What Else We Expect & Value:
Application Ecosystem Familiarity:
Experience supporting Node.js and Python microservices
paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
Modern Observability:
Practical setup and maintenance of
Grafana
,
Prometheus
, and
OpenTelemetry
pipelines
Core Scripting & Systems:
Deep fluency in
Linux
administration,
Bash
, and
Python
scripting.
Collaborative Leadership:
Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
AI-Augmented Workflow:
Daily experience leveraging modern AI developer tools and agents (
Claude Code preferred
) to accelerate engineering output.
Proactive & Autonomous Mindset:
A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
Nice to have:
Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.
What we offer:
Fully remote
work format
Schedule:
Monday–Friday, 2 PM – 11 PM Eastern European Time
(including 1 hour break)
A collaborative, innovation-first environment that values initiative and experimentation
Paid time off and sick leave
Reduced working hours on Fridays during the summer
Days off on US national holidays and your birthday.
Hiring process:
Interview with Recruiter
Interview with Hiring Manager
Technical Interview
Offer.
If you meet these criteria and are excited about contributing to our team, we encourage you to apply.
We look forward to meeting you!
👋
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
AI agents don't run in browsers. They run in sandboxes — and you will build ours.
We build secure, isolated, network-controlled environments with snapshotting primitives, designed for AI agents and reinforcement-learning workloads. An RL training run doesn't need one environment; it needs thousands, created and destroyed every second. An agent needs to be sandboxed from the world while still feeling fast enough to be useful. That tension — airtight isolation, at fleet scale, at low latency — is the product.
Your customers are the people building the next generation of AI software on our infrastructure; the primitives you ship become the runtime their agents live in.
WHAT YOU WILL DO
- Build the isolation layer: microVMs or containers, namespaces, cgroups, seccomp, snapshot and restore.
- Own the security boundary. Customers run code they didn't write and can't fully trust — your systems make that safe.
- Scale to fleets: creation latency, density, and lifecycle management for thousands of concurrent environments.
- Write Go and own the architecture and the hardest implementation decisions.
- Partner with Product Managers to turn frontier research needs into shippable primitives.
WHAT WE'RE LOOKING FOR
- Deep Linux internals: namespaces, cgroups, seccomp, virtualization — ideally microVMs of the Firecracker class.
- You have shipped production systems in Go. Not dabbled. Shipped.
- You understand network isolation at the packet level — not just firewall rules.
- Performance instincts: you know what a syscall costs, and you have the profiles to prove you've cared.
- 5+ years building backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Warsaw
Workplace: Hybrid
ROLE HIGHLIGHTS
- Engineering Supply Chain Manager (Electronics)
- Location: Warsaw, Poland
- Department: Global Supply Chain
- Reports to: Engineering Operations Manager
- Employment type: Permanent
- Workplace model: Office/On-site
- Employment is subject to applicable security screening (incl. SUPO, where required)
THE MISSION OF THE ENGINEERING SUPPLY CHAIN MANAGER (ELECTRONICS)
As our Engineering Supply Chain Manager (Electronics), you'll join our fast-moving Global Supply Chain organization and work closely with our hardware engineering teams as they design and build electronic systems on tight and shifting timelines.
You'll be an active part of our engineering projects, helping to execute them and staying ahead of supply. That means identifying long lead items and critical components as early as possible in the process, and securing them before they become bottlenecks for testing and builds. When lead times, allocation or a late design change threaten a prototype schedule, we need you to act. Our development cycles are fast and iterations are constantly occurring since we thrive on pushing the technology for the best.
You'll also be a key link between Engineering and Production. You'll communicate R&D supply chain risks and the critical components you've identified to Production, so nothing comes as a surprise at handover. Your work supports the success of every engineering prototype iteration and at the same time prepares Production for rollout and mass production.
This role suits someone who is proactive by nature, with a solution driven mindset and a deep understanding of electronics, PCB manufacturing and hardware prototyping, who is comfortable with ambiguity and acts before problems arrive rather than waiting for them. How quickly we get from concept to working hardware in orbit, and then into production, depends on how well this role is done.
WHO WE ARE
ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.
ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.
ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.
Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.
YOUR DAY-TO-DAY RESPONSIBILITIES
HIGH-VELOCITY ENGINEERING SUPPORT
- Serve as the hands-on supply chain counterpart for fast-paced electronics engineering teams working on multiple, rapidly evolving hardware projects.
- Be an active member of engineering project teams from kick-off, helping to execute the project plan and reviewing draft BOMs while the design can still be changed.
- Identify long lead items and critical components as early as possible, and secure them proactively (early orders, allocation, buffer stock) before they can delay a project.
- Translate early-stage concepts, evolving BOMs, and mid-design changes into actionable sourcing steps with minimal delay.
- Advise engineers, in real time and in early design reviews, on how component choices affect availability, alternates, obsolescence, cost and lead time.
- Identify supply issues before they become blockers and propose workaround paths immediately.
RAPID SOURCING & PROCUREMENT EXECUTION
- Own sourcing and procurement of electronic components, PCB fabrication, PCBA assembly, connectors, harness, sensors, RF parts, embedded modules.
- Run fast quoting and supplier selection so prototype and builds get their boards and parts on the dates engineering committed to.
- Lead efforts to find alternative components or new supply paths within hours, not weeks, when shortages occur.
- Set stock levels and material availability plans for development and prototype builds.
SUPPLIER INTERACTION & TECHNICAL ENGAGEMENT
- Own relationships with PCB fabricators, electronics manufacturing partners and component distributors, and work with them to understand lead time constraints, manufacturing capabilities, DFM implications and fast-track build options.
- Support technical capability assessments of PCB/PCBA vendors, machining partners, and component distributors.
- Negotiate priority build slots, allocation and expedited shipments, and secure prototypes under compressed timelines.
CROSS-FUNCTIONAL START-UP COLLABORATION
- Coordinate across engineering, manufacturing, program management, and operations to remove obstacles and maintain build readiness.
- Maintain complete visibility into prototype schedules, engineering changes, and material risks, communicating clearly and frequently.
- Operate with a bias for action: if something is unclear, you chase it; if something breaks, you fix it; if something is missing, you find it.
AGILITY, RISK MANAGEMENT & CONTINUOUS IMPROVEMENT
- Build and maintain a living view of supply risks across all active prjects, including obsolescence, allocation, single-source parts, counterfeit risk and export restrictions and qualify alternatives early.
- Keep purchasing accurate in the ERP system, with clean traceability, cost visibility and build readiness status that the organisation can rely on, even under fast-moving conditions.
- Bring an experimentation mindset: test new suppliers, new sourcing channels, new manufacturing partners, and new tools to reduce lead times and cost.
R&D TO PRODUCTION READINESS
- Communicate R&D supply chain risks and identified critical components to Production early and clearly, so they are known well before handover.
- Support the success and rapid iteration of engineering prototypes while preparing Production for rollout and mass production.
- Make sure critical and long lead parts, qualified suppliers and realistic lead times and capacity are in place before a design moves into series production.
- Help build the sourcing foundations that will carry a design from prototype into repeatable production.
WHAT WE’RE LOOKING FOR
MUST HAVES:
- Bachelor’s degree in Electrical/Electronic Engineering, Mechatronics, Supply Chain, or similar.
- 5+ years of direct experience in electronics sourcing, component procurement or engineering supply chain roles in fast-moving hardware environments.
- Strong technical understanding of semiconductors, passive components, PCB fabrication, PCBA assembly, embedded electronics, and prototyping flows.
- Demonstrated ability to work effectively in startup-like conditions, tight deadlines, shifting priorities, and rapid cycles.
- Hands-on experience interpreting electronic schematics, BOMs, AVL requirements, PCB stackups, and manufacturing documentation.
- Demonstrated ability to work effectively in startup-like conditions: tight deadlines, shifting priorities, incomplete information, and rapid cycles.
- Hands-on experience running purchasing and material management through an ERP system.
- Confident negotiator, commercially and technically, able to influence engineers, program managers and suppliers without formal authority.
- Professional English, written and spoken.
NICE TO HAVES:
- Engineering Electronics Background, knowledge of the tools and technical understanding/background of designs.
- Experience in space, aerospace, defence, hardware startups or other deep-tech R&D environments.
- Exposure to taking a hardware design from prototype into series production.
- Existing relationships with PCB/PCBA vendors, distributors and electronics manufacturing partners.
- Certifications (APICS, PMP, Six Sigma) useful but not required.
- Familiarity with rapid-prototyping suppliers, global component marketplaces, and digital sourcing tools.
APPLICATION PROCESS
- Talent Acquisition Interview
- Hiring Manager interview
- Task Stage
- Task-based interview
- Final Interview
WORKING AT ICEYE
At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.
HOW WE WORK (OUR VALUES)
Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.
- Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.
- See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.
- Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.
- Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.
- Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.
BENEFITS
Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Attraction will confirm what applies for this role and location during the process.
Base salary range for this position is dependent on experience, and will be negotiated individually.
OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.
We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.
Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
You will build storage on our cloud.
Block, filesystem, and object storage for training runs, sandboxed workloads, and general compute: you help decide what we build, what we buy, and how it adds up to storage our customers can bet a business on. Some layers we deploy and harden from best-in-class vendors. The ones that matter most we write ourselves in Go — S3-compatible object storage, tiering, backup and recovery, caching layers that put cold data on cheap spinning disks.
Storage is a strategic bet for this org: the systems you build will define how a gigawatt of European compute stores its data.
WHAT YOU WILL DO
- Build the storage stack — block, file, object — for training, sandbox, and general compute workloads.
- Design and write our own services in Go: S3-compatible APIs, tiering, backup and recovery, caching layers.
- Own the data plane: allocation, duplication, tiering, backup and recovery.
- Plan capacity across datacenters and across failure domains — petabytes, not terabytes.
- Partner with Product Managers to shape the storage roadmap and make the technical and business tradeoffs.
WHAT WE'RE LOOKING FOR
- You have built storage systems — object, block, or distributed filesystems — not just operated them. You know what happens when a disk dies mid-write and when a rebalance collides with a backup window.
- Deep distributed-systems fundamentals: durability, consistency, replication, erasure coding, failure domains.
- You have shipped production systems in Go. Systems engineers coming from C++ or Rust who are ready to write Go daily should still talk to us.
- You are comfortable with hardware reality: HDD, SSD, and NVMe tiers, and the economics of each.
- 5+ years building backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
You will build our Kubernetes product end to end: a metal-to-on-demand platform built on in-house infrastructure, with GPU support for training, inference, and general-purpose compute.
Kubernetes is our product, not just our platform — we run it on infrastructure we own end to end. You will decide how the control plane scales, how GPUs get scheduled, and how quickly a rack of bare metal becomes an on-demand cluster a customer can use. The decisions you make here shape how our infrastructure scales from today's footprint to a gigawatt, and how we turn frontier AI research into production systems used by millions.
WHAT YOU WILL DO
- Design and ship the control plane. You own the architecture and the hardest implementation decisions — scheduling, operators, provisioning, node lifecycle.
- Own the reliability of the Kubernetes control plane. It is the team's headline KPI. You make the calls when it breaks at 3am.
- Shrink the distance from metal to on-demand. Provisioning a cluster should be minutes of automation, not weeks of tickets.
- Partner with Product Managers to set priorities, scope initiatives, and make the technical and business tradeoffs.
- Raise the engineering bar through code review and knowledge sharing across the Cloud Platform org.
WHAT WE'RE LOOKING FOR
- You have shipped production systems in Go. Not dabbled. Shipped.
- You have run Kubernetes in anger — and ideally built parts of it: operators, schedulers, controllers. You understand what happens underneath it, and you have worked on Linux directly, not just on managed services that sit on top of it.
- You have run GPU workloads on Kubernetes, or you are confident you can own that domain fast.
- You think like a developer who happens to build infrastructure, not an operator who manages it. You write code other engineers depend on.
- Extensive experience building backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
A datacenter is not a cloud until software makes it one. You will build the software that turns arriving hardware into accepted clusters.
Cabling validation, burn-in, firmware, deployment validation, software stack install — all of it automated, none of it click-ops. Your KPI is time to acceptance: the hours between a rack being physically installed and it serving customer workloads. Across the industry that number is measured in weeks. You will drive it toward days, then hours, as we scale toward a gigawatt of compute across Europe.
This is a hands-on engineering role at the intersection of hardware and software. Most of your time in the code and the architecture, some of it on datacenter floors, because the automation has to survive contact with the machines it runs on.
WHAT YOU WILL DO
- Build the delivery pipeline in Go: provisioning, configuration, validation, burn-in, network bring-up, software stack install.
- Own time-to-acceptance and drive it down relentlessly — measure it, break it down, kill the slowest step first.
- Work shoulder-to-shoulder with Hardware Design and Fleet Health — reliability starts at delivery.
- Handle GPU fleets at scale: H100 and GB200-class nodes, InfiniBand and RoCE fabrics, and the failure modes they bring.
- Partner with Product Managers and the datacenter org to plan delivery waves against capacity commitments.
WHAT WE'RE LOOKING FOR
- You have automated bare-metal fleets — you have written the software that turns racks into clusters. If you have done it by hand, you resented it and scripted it.
- Hardware fluency: servers, GPUs, NICs, switches, firmware — you can read a parts list and a topology diagram.
- 5+ years building backend or infrastructure systems.
- Deep Linux: you are comfortable well below the application layer.
- You have shipped production systems in Go. Not dabbled. Shipped.
- Willing to travel to datacenter sites when the work demands it.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Paris
Workplace: Remote
ABOUT MISTRAL
Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector, co-creating customized AI systems that they can run on their terms.
We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited.
THE TEAM
Mistral is building a sovereign AI cloud for Europe. Our customers in finance, healthcare, and the public sector run frontier models on European-jurisdiction infrastructure, and the Cloud Platform team builds the systems that make that possible — compute orchestration, Kubernetes, bare metal, storage, networking, and the datacenter fleet that runs it all.
We run it all on our own metal, our own network, our own datacenters — which means when something breaks, the fix is ours to write.
European Compute Units let enterprises commit to multi-year capacity on that infrastructure, and we are scaling toward a gigawatt of compute across Europe by 2030. You will design and ship the layer every sovereign AI deployment depends on.
THE ROLE
You will build our serverless containers product: the way developers run AI apps, MCP servers, APIs, and managed workers on our cloud without thinking about servers. Push a container, get an endpoint, scale from zero to thousands of instances and back down — across CPU and GPU.
On a hyperscaler, the serverless layer is a product someone else built. Here you build it end to end: the scheduler that decides where a container lands, the routing path a request takes, the machinery that turns a scaled-to-zero service into a warm instance before a customer notices. All of it runs on metal, network, and datacenters we own.
That tension is the product: scale-to-zero economics with cold starts in milliseconds, autoscaling that absorbs a launch spike without a config change, GPUs scheduled onto containers the way other platforms schedule CPU. The customers betting on this layer are the developers building the next generation of AI software on European infrastructure.
WHAT YOU WILL DO
- Build the container platform end to end: image delivery, placement, request routing, scale-up, scale-to-zero — across CPU and GPU.
- Make cold starts a solved problem: snapshotting, prewarming, image-layer caching, whatever it takes for scale-from-zero to feel instant.
- Treat AI workloads as the normal case: GPU-backed containers, streaming responses, long-lived connections, MCP servers that cost almost nothing while idle.
- Write Go and own the architecture and the hardest implementation decisions.
- Partner with Product Managers to turn platform decisions into a product developers want to deploy on.
WHAT WE'RE LOOKING FOR
- You have shipped production systems in Go. Not dabbled. Shipped.
- You have built container or workload platforms — orchestration, scheduling, isolation, request routing — not just deployed onto someone else's serverless platform.
- Deep Linux: namespaces, cgroups, image layers, page cache — comfortable well below the application layer.
- Multi-tenancy instincts: density, isolation, and fairness when hundreds of customers share one fleet.
- Significant experience building complex backend or infrastructure systems.
- You have partnered with product, design, and business teams to ship software that reached real users.
- A low-ego, team-first mindset. We care less about your exact domain and more about whether you are the kind of technical force other engineers want to work alongside.
WHAT WE OFFER
We offer a comprehensive benefits package designed to support your well-being, growth, and work-life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks.
For the most up-to-date details on benefits available in your location, please refer to our Benefits page https://app.notion.com/p/mistralai/Benefits-at-Mistral-36e6ba59a7fe836b93dd01737fcc27ef?source=copy_link.
PRIVACY POLICY
Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy https://legal.mistral.ai/terms/applicant-privacy-policy.
Location: Worldwide
Social Discovery Group
(SDG) is a group of social discovery companies. SDG solves the problems of loneliness, isolation, and disconnection - transforming virtual intimacy into the new normal. SDG’s products redefine the way people interact and connect with one another.
Our portfolio includes social entertainment platforms designed to connect people online across different cultures and regions of the world.
We bring together a team of like-minded people and IT professionals who specialize in creating and developing globally impactful social discovery products. Our international team of digital nomads works remotely from all over the world.
We’re proud to be a two-time “Great Place to Work” winner (USA & Japan, 2024–2025) and a Top-5 Company for Work-From-Anywhere Jobs (FlexJobs, 2025).
We are looking for
Senior CV Engineer
.
Your main tasks will be:
Train and fine-tune generative models (text2image, image2image, video2image, IP-adapters) to produce photorealistic and stylized visuals
Work with image classifiers, rankers, and image/video captioning models that understand visual context
Track cutting-edge CV research and open-source developments; translate them into a CV roadmap for the ML team
Build and own the iterative model improvement process, including quality validation systems for CV outputs
Optimize inference performance: diffusion optimization, quantization, kernel and framework-level work
Optionally: train multimodal AI companions that combine CV and NLP for deeper visual understanding
We expect from you:
5+ Years of experience training diffusion models and modifying their architectures
Proficiency with diffusers and transformers libraries
Hands-on experience with IP-adapters
Backend engineering experience (Python, Go, C#) and knowledge of scalable deployment systems is an advantage
Nice to have:
Flow matching training
Diffusion model distillation
DPO and other text2image fine-tuning approaches
Text2video and CLIP fine-tuning
Experience with multimodal LLMs
NLP / LLM training and chatbot development background
What do we offer:
REMOTE OPPORTUNITY
to work full-time;
The
initial pay level
or
pay range
for this role will be shared with candidates during the recruitment process and before the commencement of employment;
Vacation
28 calendar days per year;
7 wellness days per year
(time off) that can be used to deal with household issues, to lie down and recover without taking sick leave;
Bonuses up to $5000
for recommending successful applicants for positions in the company;
50%
payment for professional training, international conferences, and meetings;
Corporate discount for
English lessons;
Health benefits.
According to the paychecks, if you are not eligible for corporate medical insurance, the company will compensate you with up to $ 1,000 gross per year per employee. This can be spent on self-purchase of health insurance or on doctor’s fees for yourself and close relatives (spouse, children);
Workplace organization.
The company provides all employees with an equipped workplace and all the necessary equipment (table, armchair, wifi, etc.) in our offices or co-working locations. In the other locations, the company provides reimbursement of workplace costs up to $ 1000 gross once every 3 years, according to the paychecks. This money can be spent on the rent of the co-working room, on equipping the working place at home (desk, chair, Internet, etc.) during those 3 years;
Internal gamified gratitude system:
receive bonuses from colleagues and exchange them for our merchandise, team building activities, massage certificates, etc.
Sounds good? Join us now!
Location: EMEA
OUR HIRING PROCESS:
We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment.
We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team.
At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team.
From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.
INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our
Privacy Policy
INFUSE is looking for a
Senior DevOps Engineer
to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization.
We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
As part of our dynamic team, your responsibilities in this role will include:
Design, build and run secure
AWS infrastructure
(EC2 with Docker Compose, EKS) with
Terraform and Ansible
; move suitable workloads from EC2 to EKS
Build and maintain
CI/CD in GitHub Actions
; move remaining Jenkins jobs to GitHub Actions
Keep new and existing services at our security baseline:
Cloudflare proxy with WAF
and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
Own monitoring, alerting and logs on our standard stack (
Grafana, OpenTelemetry, Sentry
); on-call, incident response, post-incident reviews
Own backups and regular restore tests
Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
Work with internal teams and contractors
; set and enforce standards; mentor other engineers.
Our ideal candidate possesses the following skills:
5+ Years in DevOps / SRE:
Proven background operating mission-critical production environments, including
3+ years of hands-on experience running AWS
at scale
IaC & CI/CD Mastery:
Expert with
Terraform
, highly proficient with
Ansible
, and experienced in designing production workflows with
GitHub Actions
Containerization & Kubernetes:
Strong production experience with
Docker
and
Kubernetes
(specifically managed AWS
EKS
and
Helm
)
Production Security & Incident Management:
Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and
Cloudflare WAF/proxy
configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
English proficiency
at
B2 level or higher
.
What Else We Expect & Value:
Application Ecosystem Familiarity:
Experience supporting Node.js and Python microservices
paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
Modern Observability:
Practical setup and maintenance of
Grafana
,
Prometheus
, and
OpenTelemetry
pipelines
Core Scripting & Systems:
Deep fluency in
Linux
administration,
Bash
, and
Python
scripting.
Collaborative Leadership:
Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
AI-Augmented Workflow:
Daily experience leveraging modern AI developer tools and agents (
Claude Code preferred
) to accelerate engineering output.
Proactive & Autonomous Mindset:
A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
Nice to have:
Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.
What we offer:
Fully remote
work format
Schedule:
Monday–Friday, 2 PM – 11 PM Eastern European Time
(including 1 hour break)
A collaborative, innovation-first environment that values initiative and experimentation
Paid time off and sick leave
Reduced working hours on Fridays during the summer
Days off on US national holidays and your birthday.
Hiring process:
Interview with Recruiter
Interview with Hiring Manager
Technical Interview
Offer.
If you meet these criteria and are excited about contributing to our team, we encourage you to apply.
We look forward to meeting you!
👋
Location: Georgia
OUR HIRING PROCESS:
We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment.
We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team.
At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team.
From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.
INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our
Privacy Policy
INFUSE is looking for a
Senior DevOps Engineer
to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization.
We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
As part of our dynamic team, your responsibilities in this role will include:
Design, build and run secure
AWS infrastructure
(EC2 with Docker Compose, EKS) with
Terraform and Ansible
; move suitable workloads from EC2 to EKS
Build and maintain
CI/CD in GitHub Actions
; move remaining Jenkins jobs to GitHub Actions
Keep new and existing services at our security baseline:
Cloudflare proxy with WAF
and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
Own monitoring, alerting and logs on our standard stack (
Grafana, OpenTelemetry, Sentry
); on-call, incident response, post-incident reviews
Own backups and regular restore tests
Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
Work with internal teams and contractors
; set and enforce standards; mentor other engineers.
Our ideal candidate possesses the following skills:
5+ Years in DevOps / SRE:
Proven background operating mission-critical production environments, including
3+ years of hands-on experience running AWS
at scale
IaC & CI/CD Mastery:
Expert with
Terraform
, highly proficient with
Ansible
, and experienced in designing production workflows with
GitHub Actions
Containerization & Kubernetes:
Strong production experience with
Docker
and
Kubernetes
(specifically managed AWS
EKS
and
Helm
)
Production Security & Incident Management:
Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and
Cloudflare WAF/proxy
configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
English proficiency
at
B2 level or higher
.
What Else We Expect & Value:
Application Ecosystem Familiarity:
Experience supporting Node.js and Python microservices
paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
Modern Observability:
Practical setup and maintenance of
Grafana
,
Prometheus
, and
OpenTelemetry
pipelines
Core Scripting & Systems:
Deep fluency in
Linux
administration,
Bash
, and
Python
scripting.
Collaborative Leadership:
Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
AI-Augmented Workflow:
Daily experience leveraging modern AI developer tools and agents (
Claude Code preferred
) to accelerate engineering output.
Proactive & Autonomous Mindset:
A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
Nice to have:
Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.
What we offer:
Fully remote
work format
Schedule:
Monday–Friday, 2 PM – 11 PM Eastern European Time
(including 1 hour break)
A collaborative, innovation-first environment that values initiative and experimentation
Paid time off and sick leave
Reduced working hours on Fridays during the summer
Days off on US national holidays and your birthday.
Hiring process:
Interview with Recruiter
Interview with Hiring Manager
Technical Interview
Offer.
If you meet these criteria and are excited about contributing to our team, we encourage you to apply.
We look forward to meeting you!
👋
Location: Latvia
OUR HIRING PROCESS:
We will review your application against our job requirements. We do not employ machine learning technologies during this phase as we believe every human deserves attention from another human. We do not think machines can evaluate your application quite like our seasoned recruiting professionals—every person is unique. We promise to give your candidacy a fair and detailed assessment.
We may then invite you to submit a video interview for the review of the hiring manager. This video interview is often followed by a test or short project that allows us to determine whether you will be a good fit for the team.
At this point, we will invite you to interview with our hiring manager and/or the interview team. Please note: We do not conduct interviews via text message, Telegram, etc. and we never hire anyone into our organization without having met you face-to-face (or via Zoom). You will be invited to come to a live meeting or Zoom, where you will meet our INFUSE team.
From there on, it’s decision time! If you are still excited to join INFUSE and we like you as much, we will have a conversation about your offer. We do not make offers without giving you the opportunity to speak with us live.
INFUSE is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our
Privacy Policy
INFUSE is looking for a
Senior DevOps Engineer
to own and evolve our AWS infrastructure, CI/CD pipelines, and observability stack. You will bridge cloud engineering and software development across our entire product suite, including production LLM products and legacy systems requiring modernization.
We need a proactive technical partner to lead our transition to EKS and GitHub Actions, enforce zero-trust security baselines, and mentor engineering teams along the way.
As part of our dynamic team, your responsibilities in this role will include:
Design, build and run secure
AWS infrastructure
(EC2 with Docker Compose, EKS) with
Terraform and Ansible
; move suitable workloads from EC2 to EKS
Build and maintain
CI/CD in GitHub Actions
; move remaining Jenkins jobs to GitHub Actions
Keep new and existing services at our security baseline:
Cloudflare proxy with WAF
and rate limiting, origins open only to Cloudflare, SSM access, no public SSH, least-privilege IAM, secrets rotation, regular patching and rebuilds, no containers running as root
Own monitoring, alerting and logs on our standard stack (
Grafana, OpenTelemetry, Sentry
); on-call, incident response, post-incident reviews
Own backups and regular restore tests
Control AWS cost: tags, rightsizing, removing unused resources, estimates for new projects
Regularly review the infrastructure we run, find risks and waste, and come with a plan without waiting for a ticket
Take over infrastructure that is undocumented or run by contractors; document it and bring it under IaC, CI/CD and our standards
Join new projects at kickoff: review hosting design, estimate cost, prepare infrastructure for the production-readiness review
Work with internal teams and contractors
; set and enforce standards; mentor other engineers.
Our ideal candidate possesses the following skills:
5+ Years in DevOps / SRE:
Proven background operating mission-critical production environments, including
3+ years of hands-on experience running AWS
at scale
IaC & CI/CD Mastery:
Expert with
Terraform
, highly proficient with
Ansible
, and experienced in designing production workflows with
GitHub Actions
Containerization & Kubernetes:
Strong production experience with
Docker
and
Kubernetes
(specifically managed AWS
EKS
and
Helm
)
Production Security & Incident Management:
Hands-on practice with platform hardening, zero-trust patterns, automated secrets management, system patching, and
Cloudflare WAF/proxy
configuration. Comfortable with on-call rotations, incident response, and executing verified backup restore drills
English proficiency
at
B2 level or higher
.
What Else We Expect & Value:
Application Ecosystem Familiarity:
Experience supporting Node.js and Python microservices
paired with PostgreSQL and Redis, as well as web stacks (WordPress, Nginx, PHP-FPM, MySQL) behind Cloudflare
Modern Observability:
Practical setup and maintenance of
Grafana
,
Prometheus
, and
OpenTelemetry
pipelines
Core Scripting & Systems:
Deep fluency in
Linux
administration,
Bash
, and
Python
scripting.
Collaborative Leadership:
Ability to effectively manage, document, and standardize work across internal teams and external contractor groups.
AI-Augmented Workflow:
Daily experience leveraging modern AI developer tools and agents (
Claude Code preferred
) to accelerate engineering output.
Proactive & Autonomous Mindset:
A self-starter who actively audits environments, catches vulnerabilities before they become outages, and brings actionable proposals to the table.
Nice to have:
Kafka (MSK), Jenkins, ClickHouse, Backstage, Sentry, Langfuse, SonarQube/Trivy/gitleaks, Cloudflare Zero Trust, AIOps, leading a small DevOps team, AWS/CKA certifications.
What we offer:
Fully remote
work format
Schedule:
Monday–Friday, 2 PM – 11 PM Eastern European Time
(including 1 hour break)
A collaborative, innovation-first environment that values initiative and experimentation
Paid time off and sick leave
Reduced working hours on Fridays during the summer
Days off on US national holidays and your birthday.
Hiring process:
Interview with Recruiter
Interview with Hiring Manager
Technical Interview
Offer.
If you meet these criteria and are excited about contributing to our team, we encourage you to apply.
We look forward to meeting you!
👋
Location: Belfast, Northern Ireland, Remote
Workplace: remote
Olo is a leading SaaS platform accelerating digital transformation in the restaurant industry, by helping customers deliver more personalised and profitable guest experiences. As a result, our digital ordering, payment, and guest engagement solutions enable brands to do more with less and make every guest feel like a regular.
Reporting to the Security Engineering Director, the Staff Security Engineer will act as technical lead of the Olo Security Blue Team and work on security defences that allow our systems to keep running while protecting the data of our clients and their customers.
Additionally, you will help in the identification and prioritisation of future project initiatives based on risk and execute cross-functional projects with a high degree of ownership and excellence, all while actively mentoring other team members and elevating the collective team’s capabilities and skill sets. If you are passionate about reducing risk while supporting innovation, we encourage you to apply!
You can work remotely from anywhere in Northern Ireland.
How you’ll make an impact
Guide and coach Olo’s Blue Team on Information Protection, Incident Detection and Response and Service Delivery.
You will provide strategic and technical oversight to the team and the program.
Technically lead a team of security engineers and analysts who hunt, detect, and respond to internal and external threats.
Collaborate with customers and partners to strengthen their security posture.
Drive ongoing optimisations by implementing new technologies, replacing technologies, addressing evolving threats, scaling practices and automating security activities.
Ultimately you will keep team member and customers data safe by identifying and mitigating vulnerabilities and risks by providing actionable guidance to product teams.
Information Protection
Lead Olo’s Information Protection program including the selection, testing, implementation and maintenance of security tools and services, security awareness, service provider management and the ongoing testing of those controls.
Oversee Vulnerability Management program including vulnerability assessments, risk scoring and vulnerability resolution.
Oversee Threat Hunting program to detect and mitigate advanced threats.
Manage non-event driven security reviews, including concept reviews, design reviews, patching, firewall rules and system configuration checks.
Apply Web application and API security principles and techniques, such as zero trust, RBAC, authentication, authorization, auditing, rate limiting, challenges, etc., to protect our cloud-based services from unauthorized access and abuse.
Incident Detection and Response
Oversee Incident Detection and Response program including ownership of incident response processes, tools and services and the ongoing continuous improvement of those controls.
Coordinate the detection and response to attacks through all incident phases.
Ensure incident reports are accurate, detailed and relevant.
Monitor, detect, and remediate misconfigurations and security risks across our cloud environments.
Participate in a 24/7 on-call rotation.
Security Services
Oversee Security Services program including security support requests, risk assessments, vendor assessments, PCI and SOC audit support and service provider management.
What We'll Expect from You
5+ years of Security Engineering, Security Operations or Security Architecture experience.
CISSP, GCIH or similar certification preferred.
Experience acting as technical lead to distributed teams consisting largely of remote engineers.
Experience complying with PCI-DSS and other compliance and regulatory standards.
Experience with attacker tactics, techniques and procedures.
Knowledge of information technology, evolving threats, attack patterns, incident response and cyber security standards.
Experience developing and leading incident response, remediation and mitigation activities, and providing status updates and reports.
Experience analyzing security events to discern events that qualify as a legitimate security incident as opposed to non-incidents (ie. incident investigation, implementing countermeasures, and conducting incident response).
Deep understanding of operating system, networking and application concepts.
Experience hardening Windows, MacOS, Linux Containers and Kubernetes.
Familiarity with AWS security best practices and Infrastructure-as-Code.
Experience deploying and maintaining security technologies. (e.g. Access Proxies, API Gateway, Anti-Malware, Application Control, Cloud Security Posture, Data Leak Prevention, Data Mapping, Endpoint Detection & Response, Intrusion Detection System, File Integrity Monitoring, Firewalls, Mobile Device Management, Multi Factor Authentication, SIEM, Static Inspection, Vulnerability Assessment, Web Proxies, WAF and Zero Trust).
Adept at working with internal Product & Engineering, Legal, People & Culture, Finance and GTM teams and external partners, auditors and customers.
Ability to work during critical incidents or to support coverage requirements.
About Olo
Olo is a leading restaurant technology provider with ordering, payment, and guest engagement solutions that help brands increase orders, streamline operations, and improve the guest experience. Each day, Olo processes millions of orders on its open SaaS platform, gathering the right data from each touchpoint into a single source—so restaurants can better understand and better serve every guest on every channel, every time. Over 800 restaurant brands trust Olo and its network of more than 400 integration partners to innovate on behalf of the restaurant community, accelerating technology’s positive impact and creating a world where every restaurant guest feels like a regular. Learn more at
olo.com
.
Applicant Privacy Notice (United Kingdom)
seniorKazakhstan
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
ГибридWarsaw
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks
УдалённоParis; Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location-specific perks