（高级）系统工程师 - 平台与安全（男女不限）
(Senior) System Engineer - Platform & Security (m/f/d)
你是否希望掌控基础设施，而不仅仅是维持其运行？在这里，整个技术栈都由你负责——从我们数据中心的 Proxmox 集群，到防火墙和 VPN，再到 AWS 和部署流水线。
Testsieger 是德国最大的消费者平台之一：420 万种产品，测试评测，用户评分以及集成的价格比较功能，引导数百万用户做出正确的购买决策。一支 20 人的团队，决策路径短，没有公司官僚主义——还有在葡萄牙的成熟工程团队。
你将作为技术负责人掌控我们的基础设施——身边有同事与你共同成长，工程团队也依赖于你。
职责
- 负责我们 Linux 服务器环境的运维：本地集群（Proxmox, ZFS）和 AWS
- 运维并加固网络和安全：防火墙、VPN、访问控制、证书、加固——包括与我们最大合作伙伴的网络连接
- 使用 Ansible 实现自动化，并保持基础设施版本化、可重现和文档化
- 维护我们的容器平台（Docker, Nomad, Traefik）和 CI/CD 流水线（GitHub Actions），使团队能够快速且安全地交付
- 管理生产环境中的 MySQL：备份、性能、恢复
- 扩展监控、日志和告警（Grafana, New Relic），并推动事件找到根本原因
- 作为工程、数据和产品的协作伙伴，并解释为何某些事物以特定方式构建
要求
- 多年运行 Linux 服务器环境（Debian/Ubuntu）的经验——你了解如何独立地将系统从 A 到 B 运行
- 扎实的网络知识：TCP/IP、路由、DNS、负载均衡、防火墙和 VPN 管理
- 有实际的基础设施安全经验：加固、访问控制、安全最佳实践
- 在生产环境中使用 Ansible，容器编排（Nomad、Kubernetes 或类似工具），CI/CD 流水线
- 有 AWS 或其他类似公有云的经验
- 有生产环境 MySQL 管理经验
- 精通 Bash 和 Python——用于工具开发，而不仅仅是一次性脚本
- 监控、日志和故障排查是你的专业技能，而非事后补救
- 附加技能：Terraform、RabbitMQ、Redis、零信任概念
- 英语流利；德语为加分项，非必需
福利
- 真实混合架构（本地 + 云）的完整技术掌控权——你做决定，而不是架构委员会
- 资金充足的公司，具有竞争力的薪资
- 以所有权文化为基础，决策路径短：你可以直接与 CEO 对话
- 现代技术栈：Proxmox、AWS、Ansible、Nomad、Docker、MySQL、Python、GitHub
查看英文原文
Do you want to own infrastructure rather than just keep it running? Here, the full stack is yours – from the Proxmox cluster in our own data center, through firewalls and VPNs, to AWS and the deployment pipelines.
Testsieger is one of Germany's largest consumer platforms: 4.2 million products, test reviews, customer ratings and an integrated price comparison that guides millions of users to the right purchase. A team of 20 with short decision paths and no corporate overhead – and an established engineering team in Portugal.
You will be the technical owner of our infrastructure – with a colleague at your side whom you'll grow, and an engineering team that counts on you.
Tasks
- Own the operation of our Linux server landscape: on-premise cluster (Proxmox, ZFS) and AWS
- Run and harden network and security: firewalls, VPN, access control, certificates, hardening – including the network link to our largest partner
- Automate with Ansible and keep infrastructure versioned, reproducible and documented
- Maintain our container platform (Docker, Nomad, Traefik) and CI/CD pipelines (GitHub Actions) so teams ship fast and safely
- Administer MySQL in production: backups, performance, recovery
- Extend monitoring, logging and alerting (Grafana, New Relic) and drive incidents to root cause
- Act as sparring partner for Engineering, Data and Product – and explain why things are built the way they are
Requirements
- Several years running Linux server environments (Debian/Ubuntu) – you know how to get systems from A to B without assistance
- Solid networking: TCP/IP, routing, DNS, load balancing, firewall and VPN administration
- Proven infrastructure security practice: hardening, access control, security best practices
- Ansible in production, container orchestration (Nomad, Kubernetes or similar), CI/CD pipelines
- Experience with AWS or a comparable public cloud
- MySQL administration in production
- Bash and Python – for tooling, not just one-liners
- Monitoring, logging and troubleshooting are your craft, not an afterthought
- Plus: Terraform, RabbitMQ, Redis, Zero Trust concepts
- Fluent English; German is a plus, not a requirement
Benefits
- Full technical ownership of a real hybrid stack (on-premise + cloud) – you make the decisions, not an architecture board
- Well funded company, attractive salary
- Ownership culture with short paths: you talk directly to the CEO
- Modern stack: Proxmox, AWS, Ansible, Nomad, Docker, MySQL, Python, GitHub Actions, Next.js ecosystem
- Remote from Portugal, with regular visits to Osnabrück and colleagues already based in Portugal
If you see infrastructure as your product and want to develop it with real responsibility – apply now. We're looking forward to meeting you.
Originally posted on Himalayas