Join the ride!

You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.

This position is Berlin based.

Your Responsibility

• Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
• Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
• Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
• Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
• Keep all network and security configuration as code, reviewed and deployed through CI
• Monitor for abuse and outages, and set alerting that wakes people only when it should
• Support audits and customer security questionnaires with evidence that already exists
• Effectively deploy and use AI agents

Your Experience

• 5+ years running production networks and security for an online service, with on-call experience
• Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
• Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
• Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
• Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
• Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
• Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
• Fluent English, and eligible to work in Germany

Highly desired

• Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
• Zero-trust access tooling and web application firewalls in front of public services
• Secrets management and workload identity between CI and cloud, with no long-lived keys
• Securing payment flows and card data, and the compliance work that comes with them
• Daily use of AI coding agents, reviewing their output like any pull request

Nice to have

• A valid driving licence (EU category B or equivalent). Testing the product includes trips on the road.

Don't tick every box? Get in touch anyway. Your drive to learn and grow matters a lot to us.

Benefits

• Mobility: Choose between monthly MILES credits or the Deutschlandticket.
• Fitness: Enjoy a subsidized Urban Sports Club membership for your physical and mental well-being.
• Discounts: Access 1,500+ providers for discounts on sneakers, theater visits, and more.
• Home Office: Enjoy the flexibility of working from our office in Berlin and from home.
• Retirement: Secure your financial future with our attractive pension plan.
• Growth: We prioritize personal development through knowledge sharing and training opportunities (with the support from our HR Team and the Team Leads).
• Social Impact: We dedicate a portion of our revenue to support regional social projects, actively contributing to the well-being of society and the environment. #milescharity