
DevOps Engineer, Security
NeoBIM GmbH
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
AWSCloudEC2GrafanaLinuxPostgresPrometheusShell ScriptingTerraformTypeScriptVault
About the role
- Execute neoBIM’s DevOps strategy, combining strategic foresight with hands‑on implementation
- Embed DevSecOps principles into every stage of development — from secure code scanning and dependency management to vulnerability assessment and threat modeling
- Oversee the end‑to‑end build and operation of neoBIM’s infrastructure: from Linux servers, containers and cloud environments to databases and monitoring
- Design CI/CD pipelines, automate workflows with GitHub Actions and ensure the engineering team can deliver quickly and safely
- Use Terraform to manage and evolve scalable cloud infrastructure
- Implement monitoring, alerting and incident response to keep our services resilient
- Work closely with engineering, product and leadership to align DevOps with business goals
Requirements
- Solid understanding of Linux systems administration, shell scripting and performance tuning
- Expertise in building, running and maintaining containerized applications
- Hands-on experience with core AWS services (EC2, S3, RDS, IAM, Lambda, etc.) to design scalable infrastructures
- Strong knowledge of PostgreSQL, including optimization, backup/restore and high availability setups
- Experience deploying modern web applications via Vercel, including CI/CD integration
- Advanced use of Infrastructure as Code to manage and scale cloud infrastructure reproducibly
- Proven ability to set up and maintain repositories, branching strategies and automated workflows
- Familiarity with tools such as Prometheus, Grafana or Datadog for metrics, alerting and observability
- Experience in agile project tracking and integration with developer workflows
- Understanding of monorepo management and build acceleration using turborepo or similar
- Deep understanding of Identity and Access Management, enforcing least-privilege principles and secure role-based access across AWS and CI/CD systems
- Experience integrating automated code and container scans (e.g. Trivy, Snyk, Dependabot) and applying system hardening best practices
- Ability to read and understand TypeScript code to better support developer teams
- Knowledge of implementing real-time communication channels between client and server
- Experience integrating infrastructure monitoring and automation alerts into Slack for team collaboration
- Hands-on use of tools like HashiCorp Vault, AWS Secrets Manager, or GitHub Encrypted Secrets for secure credentials handling.
Benefits
- Attractive Compensation & Growth Path
- Strategic Ownership of High-Impact AI Initiatives
- Access to World-Class Infrastructure
- A Culture of Deep Tech and Real-World Application
- Flexibility with remote first work enviroment and a great team that shapes the future
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
DevOpsDevSecOpsLinux systems administrationShell scriptingContainerizationAWSPostgreSQLInfrastructure as CodeCI/CDTypeScript
Soft skills
Strategic foresightCollaborationCommunicationProblem-solvingLeadership