> Markdown version of [/jobs/ext/2457972-hpc-systems-engineer-security-architecture-cluster-administration](https://www.wearedevelopers.com/jobs/ext/2457972-hpc-systems-engineer-security-architecture-cluster-administration). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # HPC Systems Engineer - Security Architecture & Cluster Administration - **Company:** Cyber Valley GmbH - **Location:** Tübingen, Germany - **Contract:** Permanent contract - **Skills:** Proxmox, Kubernetes Security, Microsoft Access, Systems Engineering, Bash Shell, Ubuntu (Operating System), Cloud Computing, Configuration Management, Cyber Security, Data Centers, Linux, File Systems, Ethernet, Identity and Access Management, InfiniBand, Intrusion Detection and Prevention, Job Scheduling, Python (Programming Language), Network Security, Machine Learning, Open Access, Red Hat Enterprise Linux, Ansible, Software Vulnerability Management, Weka, Ceph (Software), Data Logging, Data Processing, High Performance Computing, System Availability, Information Technology, Slurm, Docker - **Published:** August 28, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=c9d76233037e0c56 ## About the Role * Masters degree in Computer Science or a related field * In-depth IT security knowledge: system hardening, network security, applied cryptography and IAM - with the ability to derive architectural decisions from a threat model, not only to apply given baselines * Solid Linux experience in production environments (RHEL/Almalinux/Ubuntu) * Hands-on HPC background: Slurm, parallel file systems (Weka, Lustre, Ceph), GPU workloads and high-speed networks (InfiniBand, 400G Ethernet) * Experience with virtualization for management-plane and infrastructure services (Proxmox) * Strong scripting and automation skills (Bash, Python, Ansible) and experience with configuration management / Infrastructure-as-Code * A plus: security frameworks (ISO 27001, BSI Grundschutz), container security (Apptainer/Singularity/Docker) or offensive-security fundamentals * Independent, structured working style and good communication in English; German is a plus * A collaborative, user-facing mindset - comfortable supporting and advising researchers and translating their needs into platform design ## Description Traditionally, HPC environments prioritized only performance and open access, with security as an afterthought. As their clusters grow and handle increasingly sensitive research data, security becomes mission-critical. They are looking for an HPC System Engineer who combines hands-on cluster operations with a security mindset. You will actively shape the security architecture of a live, production HPC / ML environment, keep their systems hardened, and build the processes and infrastructure that protect researchers, their data and their compute against a fast-evolving threat landscape., * Design and operate their HPC clusters across four data centers, including scheduler (SLURM), parallel filesystems, networks and accelerators, ensuring high availability and throughput for research workloads * Conceive and establish the security architecture of the Machine Learning Science Cloud and harden the HPC environment * Evolve the automated provisioning and configuration of heterogeneous compute, storage and network nodes (e.g. image-based provisioning, node lifecycle) * Run patch and vulnerability management - risk assessment across heterogeneous systems * Build and operate logging, monitoring and intrusion detection, and integrate HPC telemetry into both operational dashboards and incident-response workflows * Lead incident response for the clusters: detection, containment, forensic support and post-incident review * Automate operations and security policy as code (Ansible/IaC) * Advice researchers on efficient, secure cluster usage (job scheduling, data handling, access workflows) and derive requirements for our further roadmap from their scientific workloads ## Related Videos - [Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬](https://www.wearedevelopers.com/videos/100355-running-secure-life-science-research-at-scale-using-hybrid-gpu-hpc-and-kubernetes) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)