Infrastructure Automation and Observability Engineer

CERT-EU’s infrastructure team is a small but highly skilled team that is responsible for the design, implementation, automation and continuous improvement of the infrastructure platforms and managed services supporting CERT-EU’s operational and security services.

As a small team with a large scope of responsibilities, automation and infrastructure-as-code underpins everything we do. We strive to build and maintain reliable, scalable and secure infrastructure, and invest in observability to tell us when we come up short.

The scope of technologies under our care includes:

• Networking
• Virtualisation
• Storage
• Linux infrastructure
• SSO and IAM
• Access control
• Firewalls & VPN
• Routing and switching
• DNS
• Managed services, including Elasticsearch, S3, Postgres, Gitlab
• Documentation
• Security and hardening
• Containers and orchestration

We are looking for someone to strenghten our team, and share the workload. The ideal candidate is somebody eager to learn with an interest - or preferably experience - of several of the technologies under our care.

The following tasks are common in the day to day work of the infrastructure team:

• Automation, Infrastructure-as-Code (IaC), configuration management and CI/CD practices using technologies such as Terraform, Ansible, Git or equivalent automation frameworks.
• Observability, including metrics, logging, tracing, alerting, using technologies such as Prometheus, Grafana, Elasticsearch, Kibana or equivalent.
• Architecture of infrastructure and services, and managing the interactions between networking, compute, virtualization, storage, container platforms and core infrastructure services.
• Networking, including routing (LAN and WAN), switching, VLANs, DNS, DHCP, VPN technologies, load balancing, network segmentation and network troubleshooting. * Virtualization via Proxmox, VMware vSphere or other hypervisors, including cluster management, high availability and lifecycle management.
• Storage technologies, including SAN, NAS, Fibre Channel, iSCSI, distributed storage systems, replication, backup solutions and storage performance optimisation.
• Identity and Access Management (IAM), Single Sign-On (SSO) and authentication technologies, including Keycloak, Okta or equivalent platforms.
• Linux system administration and enterprise infrastructure services.
• Container platforms and orchestration technologies, including Kubernetes.
• Infrastructure security technologies and services, including firewalls, reverse proxies, VPNs, PKI, certificate lifecycle management.
• Scripting and automation using Python, Bash, JavaScript, or other tooking, including the development of automation workflows.

We do not expect candidates to know all of this, but we do expect you to find all of this interesting and worth learning more about.

The selected candidate should also demonstrate the following required skills and characteristics:

• Strong analytical and problem-solving skills, including the ability to process large amount of information quickly.
• Ability to establish and maintain effective working relations with co-workers in an international and multidisciplinary work environment.
• Excellent communication skills in English, both orally and in particular in writing as we are a part-remote organisation.
• A focus on constant learning and improvement of technical and personal skills.
• The ability to adjust to a wide range of IT technologies and become proficient in new ones swiftly.

The candidate must hold a security clearance at EU SECRET level or be in a position to be security cleared., * Be able to provide a certificate of good conduct

• Have fulfilled any legal obligations related to military service
• Be able to produce evidence of thorough knowledge of one of the official EU languages (level C1) and satisfactory knowledge of a second official EU language (level B2).

Additionally, to be recruited as a contract agent, you must have:

For function groups II and III

You must meet one of the following criteria:

• Hold a post-secondary education diploma
• Meet both of the following conditions:
• Hold a secondary education diploma that provides access to post-secondary education, and appropriate professional experience of at least three years
• Have professional training or professional experience of an equivalent level, where justified in the interest of the service.

For function group IV

You must meet both of the following criteria:

• Hold a university degree corresponding to completed university studies of at least three years attested by a diploma
• Have professional training of an equivalent level, where justified in the interest of the service.

• A stimulating and unique environment where personal development, growth and initiative are encouraged
• Continuous learning opportunities
• Working with a supportive and dynamic team with a deep sense of mission
• Flexible scheduling with the possibility to work from home on a part-time basis
• An attractive salary.