**Berlin • Cybersecurity & AI Startup • Recently Funded** A newly funded cybersecurity startup in Berlin is looking for a DevOps Engineer to join as a founding team member and help design the core security, identity, and enforcement foundations of a next-generation AI-powered risk management platform. We are an early-stage startup founded by experienced cybersecurity leaders with backgrounds in Israeli intelligence units. We are looking for a hands-on **Founding DevOps Engineer** for a hybrid role based in central Berlin. If you are passionate about cybersecurity and AI, thrive in fast-paced startup environments, and enjoy building complex platforms from the ground up, this is an opportunity to make a real impact. We’re building a next-generation cyber risk platform that helps enterprises understand, measure, and reduce identity risk at scale. Our goal is to turn complex identity and security data into clear, actionable risk insights that CISOs and CTOs can trust. You will work from scratch on core platform components from day one, shaping how modern enterprises manage and reason about risk using cloud-native systems, AI-driven analysis, and automated enforcement through AI agents. **Key Responsibilities** - **Design, build, and operate** the core **cloud infrastructure** of the platform from day one, supporting a secure, scalable, production-grade SaaS - **Own AWS environments** end to end, including networking, IAM, compute, storage, and security boundaries - Build and maintain **Infrastructure as Code** using Terraform to ensure repeatable, auditable, and secure deployments - Design and operate **CI/CD pipelines** enabling fast, safe, and reliable delivery across all services - Own containerized workloads using **Docker and Kubernetes (EKS)**, including deployment, scaling, and runtime security - **Implement observability** across the platform using metrics, logs, and traces (Prometheus, OpenTelemetry, Grafana) - Ensure high availability, reliability, and **performance of production systems**, including databases and graph stores - Operate and secure **data infrastructure** (PostgreSQL, graph databases) in production environments - Embed **security best practices** across infrastructure, including least privilege IAM, network isolation, and Zero Trust principles - **Partner closely with backend and AI engineers** to design secure service boundaries and deployment models - **Troubleshoot** and resolve complex production incidents across infrastructure, networking, and application layers - **Build PoCs** and validate infrastructure and security design decisions in an early-stage environment - Establish **DevOps, SRE, and operational best practices** as the company scales - Support **compliance readiness** by enabling controls, logging, and evidence collection for security frameworks - Continuously improve **platform cost efficiency**, reliability, and operational maturity - Build whole platform DevOps setup **from scratch** ## Job requirements **Must have skills** - **5+ years of DevOps/SRE** experience - **5+ years experience with AWS** in production environments - Hands-on coding mentality; \*\*can build things from scratch \*\*including security architecture yourself - Hands-on experience with **Docker, Kubernetes** (EKS) and containerized workloads - Experience with **CI/CD pipelines** (GitHub Actions or similar) - Experience operating **PostgreSQL (RDS / Aurora), Neo4J(or similar)** - Practical knowledge of **AWS networking, VPC, subnets, ALB, security groups, AWS IAM** - Experience with **Infrastructure as Code** (Terraform) - Experience with **monitoring, logging, observability** (Grafana, OpenTelemetry, Prometheus) - Ability to code in **Python** - Experience with **Coding CoPilots**(Claude Code, GitHub Copilot, AWS CodeWhisperer, Codex, etc.) - Knowledge of Experience supporting **production SaaS platforms** - High ownership mentality, startup mindset, and ability to **move quickly** - Experience in **startup or scale-up environments** - Low ego, high commitment, and a **true tech startup mentality** - Excellent **English** communication skills **Nice-to-have requirements** - Experience working with **Go** or **Java** - Experience with **MLOps** - Experience with security architecture, identity security, or **security engineering** - Familiarity with **compliance frameworks** (NIS2, DORA, ISO 27001, SOC 2) - Understanding of **OAuth/OIDC, API tokens, IdP, scopes, SSO, SCIM, roles, RBAC/ABAC, service accounts** - Familiarity with cloud identity and security controls (e.g. **IAM, CloudTrail, Azure Active Directory / Entra ID**) - Hands-on with SIEM platforms such as **Splunk, Microsoft Sentinel, or IBM QRadar** - Experience designing **permission models, identity graphs, or access control frameworks** - Knowledge of tokenization, **Zero Trust principles**, least privilege, and continuous verification - Experience with Security related to **AI/LLM systems, agent logic, or willingness to learn fast** - Familiarity with **AI agent behavior**, LLM security, or agent sandboxing - Previous experience in **cybersecurity**, identity startups - You are a fan of **rock or metal** music - Excellent **German** communication skills **Benefits** - **Founding Team Member Equity** — ESOPs in a well funded cybersecurity company - **Competitive Compensation** — salary aligned with market, flexible early-stage arrangements possible - **Founding Team Member Status** — shape the company from day one and own critical security technical decisions - **Fresh Funding Secured** — immediate runway to build, hire, and execute fast - **Security Contribution** — contribute to security architecture across identity, AI agents, and enforcement - **High Autonomy** — freedom to design and build without corporate overhead - **Work with a Technical CEO and CPTO** — fast iteration, strong alignment, clear di