Role Description
You would be one of our first infrastructure hires, taking day-to-day operation of the platform off the CTO. Linro enforces policy on other people's cloud infrastructure, so our own has to be reliable, reproducible and auditable. You own production: how Linro runs for each customer, how it upgrades, and how we know it is unhealthy before a customer does.
-
Own production reliability: SLOs, alerting, on-call and blameless postmortems for the control plane and every customer installation.
-
Make the install fleet boring: provisioning, maintenance windows and safe auto-upgrades across SaaS and self-hosted installs.
-
Fix the open reliability work: sensor memory ceilings and OOM visibility, ClickHouse cost and capacity, and the health of Postgres, PGMQ and Temporal.
-
Evolve the platform: Terraform and Terragrunt, Helm, GitHub Actions with short-lived OIDC credentials, local development (Tilt, Coder), and staging and production environments, with guardrails for humans and AI agents alike.
-
Produce audit-ready operations: backups, disaster recovery and continuity tests with evidence for SOC 2 and ISO 27001.
Qualifications
-
Hands-on operation of AWS, GCP or Azure in production, AWS preferred.
-
Not just deploying to it, actually running it: accounts and access management, networking and the failure modes.
-
3+ years running production Kubernetes with Helm, including debugging OOMs, resource limits and failed rollouts.
-
Terraform in multi-environment setups, with CI/CD in GitHub Actions and short-lived credentials.
-
Go, or Python and a wish to learn Go.
-
You read and write code in the services you operate.
-
Observability and SLOs: symptom-based alerting with Prometheus, Grafana or OpenTelemetry, and the discipline to delete noisy alerts.
-
Production Postgres: backups, point-in-time recovery, migrations and upgrades.
-
Incident ownership: on-call, leading incidents and writing postmortems that change something.
-
Security-minded operations: least privilege, secrets handling, access reviews and audit trails.
-
You work with AI agents every day, including for infrastructure changes, and know where to trust them and where to check their output.
Requirements
-
Operating Temporal, queues or ClickHouse, including cost tuning.
-
Shipping and upgrading software in customer-run or self-hosted environments.
-
Compliance operations: SOC 2, ISO 27001 or PCI DSS evidence.
-
Using AI coding agents safely for infrastructure work.
-
Early-stage startup experience, or having been a founding infrastructure engineer.
Benefits
-
Real ownership: You own production and the platform underneath it, with direct contact with the engineers and a say in how we build.
-
Meaningful equity: You are an early employee, and your stake reflects it.
-
Competitive salary, benchmarked to the market.
-
A quarterly European offsite, and a team that takes both the mission and each other's time seriously.
Company Description
Linro is a Berlin-based cloud security company building a real-time, agentic cloud-security platform.
Founded in Berlin in 2026 and built fully remote across Europe, Linro has a platform that's real and working, with plenty still to shape.