Senior DevOps & Cloud Infrastructure Engineer

About the role

We are looking for a senior DevOps and cloud infrastructure engineer to help a fast‑growing climate‑tech start‑up scale its platform. You will work closely with data engineers, scientists and software developers to build a reliable, secure and cost‑effective infrastructure.

Key responsibilities

• Design, implement and maintain Terraform IaC for development, staging and production environments.
• Operate managed Kubernetes clusters: lifecycle management, upgrades, autoscaling, custom operators and CRDs.
• Set up CI/CD pipelines using Bitbucket Cloud and Bitbucket Pipelines, delivering GitOps deployments with Helm charts (Argo CD or Flux compatible).
• Create and scan secure Docker/OCI images using multi‑stage builds.
• Implement observability stack (Prometheus, Grafana, OpenTelemetry, Loki) and define SLOs and alerting.
• Manage security controls: IAM, mTLS, Vault, sealed secrets, vulnerability scanning and network policies.
• Support data pipelines (Spark, Dask, Prefect or Airflow) and large‑file transfers to S3‑compatible storage.
• Drive cost optimisation through rightsizing, spot instances and storage lifecycle policies.
• Write runbooks, participate in on‑call rotation and handle incident response.
• Administer heterogeneous workstations (Linux, Windows, macOS) throughout their lifecycle.

Required profile

• Proven experience operating production Kubernetes clusters in a managed cloud.
• Strong expertise with Terraform using modular patterns and remote backends.
• Hands‑on experience with Bitbucket Cloud, Bitbucket Pipelines and Helm‑based deployments.
• Solid knowledge of Docker/OCI best practices and image scanning workflows.
• Familiarity with observability tools such as Prometheus, Grafana and OpenTelemetry.
• Excellent communication skills and ability to work cross‑functionally.

Required skills

• Terraform
• Kubernetes (managed cloud)
• Bitbucket Cloud & Pipelines
• Helm
• Docker / OCI
• Prometheus, Grafana, OpenTelemetry, Loki
• Vault, IAM, mTLS, sealed secrets
• Python, Bash
• Spark, Dask, Prefect, Airflow
• S3‑compatible object storage (e.g., Scaleway)
• GDAL, xarray, pyarrow
• TensorFlow Serving, FastAPI, Uvicorn

What we offer

• Opportunity to shape infrastructure for a climate‑impact mission.
• Collaborative environment with AI and satellite data experts.
• Hybrid work model (2 days onsite in Paris).