About Linro

Linro is a Berlin-based cloud security company building a real-time, agentic cloud-security platform. Teams ship with AI. AI ships with Linro.

Infrastructure changes constantly, and increasingly it's AI agents making the changes. Tools that scan snapshots and flag risk after the fact can't keep up. Linro enforces intended state across the whole lifecycle instead, from commit to runtime: MCP and pre-commit hooks at commit time, blast-radius simulation that blocks bad changes before they ship, and real-time detection, enforcement and auto-remediation in production. Most tools tell you what's wrong. Linro stops it.

We have each been on the receiving end of this problem: Running cloud security at scale, building the platforms underneath it, and shipping in regulated systems where a wrong change isn't an option. Founded in Berlin in 2026 and built fully remote across Europe, Linro has a platform that's real and working, with plenty still to shape.

The role

You would be one of our first infrastructure hires, taking day-to-day operation of the platform off the CTO. Linro enforces policy on other people's cloud infrastructure, so our own has to be reliable, reproducible and auditable. You own production: how Linro runs for each customer, how it upgrades, and how we know it is unhealthy before a customer does.

What you will do

Own production reliability: SLOs, alerting, on-call and blameless postmortems for the control plane and every customer installation.

Make the install fleet boring: provisioning, maintenance windows and safe auto-upgrades across SaaS and self-hosted installs.

Fix the open reliability work: sensor memory ceilings and OOM visibility, ClickHouse cost and capacity, and the health of Postgres, PGMQ and Temporal.

Evolve the platform: Terraform and Terragrunt, Helm, GitHub Actions with short-lived OIDC credentials, local development (Tilt, Coder), and staging and production environments, with guardrails for humans and AI agents alike.

Produce audit-ready operations: backups, disaster recovery and continuity tests with evidence for SOC 2 and ISO 27001.

What we are looking for

Hands-on operation of AWS, GCP or Azure in production, AWS preferred. Not just deploying to it, actually running it: accounts and access management, networking and the failure modes. We run across several clouds, so you pick up the others quickly.

3+ years running production Kubernetes with Helm, including debugging OOMs, resource limits and failed rollouts.

Terraform in multi-environment setups, with CI/CD in GitHub Actions and short-lived credentials.

Go, or Python and a wish to learn Go. You read and write code in the services you operate.

Observability and SLOs: symptom-based alerting with Prometheus, Grafana or OpenTelemetry, and the discipline to delete noisy alerts.

Production Postgres: backups, point-in-time recovery, migrations and upgrades.

Incident ownership: on-call, leading incidents and writing postmortems that change something.

Security-minded operations: least privilege, secrets handling, access reviews and audit trails.

You work with AI agents every day, including for infrastructure changes, and know where to trust them and where to check their output.

Nice to have

Operating Temporal, queues or ClickHouse, including cost tuning.

Shipping and upgrading software in customer-run or self-hosted environments.

Compliance operations: SOC 2, ISO 27001 or PCI DSS evidence.

Using AI coding agents safely for infrastructure work.

Early-stage startup experience, or having been a founding infrastructure engineer.

How we work

We work remotely across Europe. On-call is part of this role. We will be open about how the rotation works and compensate it. We get the whole team together in person somewhere in Europe once a quarter for a few days. We work async by default, write things down, and protect people's focus time.

What we offer

Real ownership. You own production and the platform underneath it, with direct contact with the engineers and a say in how we build.

Meaningful equity. You are an early employee, and your stake reflects it.

Competitive salary, benchmarked to the market.

A quarterly European offsite, and a team that takes both the mission and each other's time seriously.

The honest version

This is early. Our infrastructure is defined as code, but parts of it are still being moved into CI, runbooks are thin, and some environments are rougher than others. You would inherit something that works, not something polished. If you want a mature platform team with a clear roadmap for the next two years, this is not it. If you want to build the operational backbone of a security product from close to the start, and you like the idea of running the thing that keeps AI agents from breaking production, we should talk.