SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ICEYE is seeking a Sovereign Infrastructure Operations Engineer to take operational ownership of the company's secure bare-metal infrastructure, virtualization platforms, and production Kubernetes environments. You will keep ICEYE's dedicated air-gapped collaboration platform reliable, secure, and audit-ready under some of Europe's strictest information security frameworks.
ICEYE is the world leader in sovereign intelligence from space, delivering persistent monitoring capabilities via the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. The company serves defense, intelligence, environmental monitoring, insurance, and emergency management sectors globally, with over 1,000 employees across Europe, North America, the Middle East, and Asia-Pacific.
Your day-to-day responsibilities will include:
- Manage configuration state across physical and virtual assets using GitOps with Infrastructure as Code tools (Git/Gitlab, Ansible, Terraform, or Puppet), removing manual configuration drift in secure environments aligned with strict change policies
- Maintain and support production Kubernetes clusters in restricted environments, covering upgrades, storage integration, and registry management
- Administer secure platform core services (Mattermost, Nextcloud, Keycloak, OpenBao), including deployment, upgrades, and integration with local IAM and storage
- Run weekly meetings (change management, vulnerability management) with infrastructure stakeholders
- Maintain technical security controls to satisfy Finnish Katakri, German VS-NfD, and related European frameworks (NIS2, ISO 27001), including patch management, hardening, and access control
- Maintain secure infrastructure networking (VLAN isolation, mTLS, PKI) and identity integrations in coordination with network and security teams
- Execute backup and disaster recovery procedures and routine hardware maintenance across air-gapped or high-security sites
The role reports to the Head of IT and is permanent, hybrid-based in Espoo. Employment is subject to applicable security screening, including SUPO where required.
REQUIREMENTS:
Must haves:
- 5+ years hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, with focus on Linux environments
- Practical experience running and maintaining production Kubernetes clusters
- Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching
- Practical knowledge of Katakri, VS-NfD, or equivalent European security/compliance frameworks (ISO 27001, NIS2)
- Solid understanding of enterprise networking fundamentals (VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, PKI)
- Eligibility to obtain and maintain a high-level national security clearance in Finland
Nice to haves:
- Experience with Ceph or ZFS storage systems
- Experience with at least one Infrastructure as Code tool (Ansible, Terraform, or Puppet)
- Experience with Keycloak, Vault, or internal PKI management
- Familiarity with Kubernetes operations in secure or air-gapped environments
