The Role
Own the end-to-end network and security posture of a cloud platform, including cloud networking, VPNs, IAM, zero-trust access, firewalls, WAF, TLS, secrets, vulnerability management, incident response, monitoring, and compliance evidence. Maintain security infrastructure as code through CI, support audits, and secure customer and payment data. The role requires production network and security experience, on-call availability, cloud and infrastructure-as-code expertise, identity engineering, Linux and container experience, and fluent English with German work eligibility.
Summary Generated by Built In
Join the ride!
You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.
This position is Berlin based.
Your Responsibility
* Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
* Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
* Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
* Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
* Keep all network and security configuration as code, reviewed and deployed through CI
* Monitor for abuse and outages, and set alerting that wakes people only when it should
* Support audits and customer security questionnaires with evidence that already exists
* Effectively deploy and use AI agents
Your Experience
* 5+ years running production networks and security for an online service, with on-call experience
* Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
* Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
* Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
* Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
* Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
* Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
* Fluent English, and eligible to work in Germany
Highly desired
* Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
* Zero-trust access tooling and web application firewalls in front of public services
* Secrets management and workload identity between CI and cloud, with no long-lived keys
* Securing payment flows and card data, and the compliance work that comes with them
* Daily use of AI coding agents, reviewing their output like any pull request
Nice to have
* A valid driving licence (EU category B or equivalent). Testing the product includes trips on the road.
__Don't tick every box? Get in touch anyway. Your drive to learn and grow matters a lot to us.__
Benefits
* __Mobility:__ Choose between monthly MILES credits or the Deutschlandticket.
* __Fitness:__ Enjoy a subsidized Urban Sports Club membership for your physical and mental well-being.
* __Discounts:__ Access 1,500+ providers for discounts on sneakers, theater visits, and more.
* __Home Office:__ Enjoy the flexibility of working from our office in Berlin and from home.
* __Retirement:__ Secure your financial future with our attractive pension plan.
* Growth: We prioritize personal development through knowledge sharing and training opportunities (with the support from our HR Team and the Team Leads).
* __Social Impact:__ We dedicate a portion of our revenue to support regional social projects, actively contributing to the well-being of society and the environment. #milescharity
You own the network and security posture of our platform end to end: the cloud
environments our services run in, the connections between vehicles, offices (VPN),
back-office systems (Admin-Tools), and the controls that keep customer and payment
data safe.
Our product runs on the street around the clock. Your work keeps it reachable, keeps the
wrong people out, and makes every change to the network reviewable and reversible.
This position is Berlin based.
Your Responsibility
* Design, build and run our cloud networks: VPCs, routing, DNS, load balancing, private connectivity and zero-trust access for staff and services
* Own identity and access: single sign-on, multi-factor authentication, roles and least-privilege access across cloud, tools and application systems
* Harden the platform: firewall and WAF policy, TLS and certificate lifecycle, secrets management, host and container baselines
* Run vulnerability management from scan to fix, and lead security incident response with clear write-ups
* Keep all network and security configuration as code, reviewed and deployed through CI
* Monitor for abuse and outages, and set alerting that wakes people only when it should
* Support audits and customer security questionnaires with evidence that already exists
* Effectively deploy and use AI agents
Your Experience
* 5+ years running production networks and security for an online service, with on-call experience
* Deep networking fundamentals: TCP/IP, DNS, TLS, routing, VPN and firewalls, on a public cloud and on physical office networks
* Hands-on with one major cloud provider's networking and IAM, and with infrastructure as code such as Terraform or OpenTofu
* Identity engineering in practice: OIDC and SAML single sign-on, MFA rollout, role design and access reviews
* Security operations: vulnerability scanning, log analysis, incident handling and clear post-incident write-ups
* Comfortable with Linux, containers and CI pipelines, and able to read code in at least one language
* Working knowledge of GDPR and of what a security audit such as ISO 27001 asks for
* Fluent English, and eligible to work in Germany
Highly desired
* Experience in mobility, logistics, IoT or another product with devices in the field talking to a backend
* Zero-trust access tooling and web application firewalls in front of public services
* Secrets management and workload identity between CI and cloud, with no long-lived keys
* Securing payment flows and card data, and the compliance work that comes with them
* Daily use of AI coding agents, reviewing their output like any pull request
Nice to have
* A valid driving licence (EU category B or equivalent). Testing the product includes trips on the road.
__Don't tick every box? Get in touch anyway. Your drive to learn and grow matters a lot to us.__
Benefits
* __Mobility:__ Choose between monthly MILES credits or the Deutschlandticket.
* __Fitness:__ Enjoy a subsidized Urban Sports Club membership for your physical and mental well-being.
* __Discounts:__ Access 1,500+ providers for discounts on sneakers, theater visits, and more.
* __Home Office:__ Enjoy the flexibility of working from our office in Berlin and from home.
* __Retirement:__ Secure your financial future with our attractive pension plan.
* Growth: We prioritize personal development through knowledge sharing and training opportunities (with the support from our HR Team and the Team Leads).
* __Social Impact:__ We dedicate a portion of our revenue to support regional social projects, actively contributing to the well-being of society and the environment. #milescharity
Skills Required
- 5+ years running production networks and security for an online service, including on-call experience
- Deep networking knowledge including TCP/IP, DNS, TLS, routing, VPNs, and firewalls
- Hands-on experience with networking and IAM in one major cloud provider
- Experience with infrastructure as code such as Terraform or OpenTofu
- Practical identity engineering experience with OIDC, SAML, SSO, MFA, role design, and access reviews
- Security operations experience including vulnerability scanning, log analysis, incident handling, and post-incident reporting
- Comfort with Linux, containers, CI pipelines, and reading code in at least one programming language
- Working knowledge of GDPR and ISO 27001 security audit requirements
- Fluent English
- Eligible to work in Germany
- Experience in mobility, logistics, IoT, or products with field devices communicating with backends
- Experience with zero-trust access tooling and web application firewalls
- Experience with secrets management and workload identity between CI and cloud
- Experience securing payment flows and card data compliance
- Daily use of AI coding agents and ability to review their output
- Valid EU category B or equivalent driving licence
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
MILES Mobility is a leading car sharing and rental provider based in Berlin, dedicated to making urban travel sustainable, convenient, and accessible. The company offers a flexible, per-kilometer based model for renting cars and vans, providing an alternative to private car ownership. Operating in 14 cities with a fleet of over 18,000 vehicles, MILES focuses on simplifying urban mobility through its app-based service.
