Security Engineer

ATMOS Works is looking for a Senior Infrastructure & Security Engineer to design, build, and secure a dedicated on-premises IT environment for aerospace and defence applications, and help prepare it for handling sensitive and potentially classified (VS-NfD) information.

Key responsibilities

• You will design, build, and operate secure, highly available on-premises infrastructure — networks, servers, storage, virtualization, and endpoints.
• You will develop secure network architectures (firewalls, VLANs, VPNs, segmentation).
• You will manage centralized identity, access, and device permissions on a least-privilege basis.
• You will secure engineering platforms (PDM, Git, MLflow, documentation, project management).
• You will implement hardening, patch/vulnerability management, and endpoint protection.
• You will set up monitoring, logging, and incident detection.
• You will maintain backup, recovery, and disaster-recovery procedures, including restore tests.
• You will investigate security incidents and coordinate corrective action.
• You will maintain documentation, network diagrams, and security/emergency plans.
• You will support BSI IT-Grundschutz, ISO 27001, and VS-NfD compliance.
• You will coordinate external IT and security providers.
• You will drive continuous improvement in resilience and security posture.

Profile required

• Bachelor's/Master's in Computer Science, Cybersecurity, IT, or equivalent experience.
• 4+ years in IT infrastructure, systems engineering, or cybersecurity.
• Strong Linux and Windows server administration skills.
• Solid networking experience (TCP/IP, VLANs, firewalls, VPNs).
• Experience with IAM, RBAC, MFA, and privileged access.
• Experience with virtualization, storage, backup, and containers.
• Understanding of hardening, patch/vulnerability management, monitoring.
• Strong documentation and process-building skills.
• Willingness to work primarily on-site.
• Fluent German and English.

Preferred qualifications

• Experience with VS-NfD or classified IT environments.
• Knowledge of BSI/ISO 27001.
• Experience with OPNsense/pfSense, Docker, Git, MLflow, or PDM tools.
• SIEM/IDS experience.
• PKI, encryption, key management.
• Background in aerospace, defence, or critical infrastructure.

ATMOS Works is a dedicated business unit of ATMOS Space Cargo, based in Kraków, Poland, and established to serve European government and defence customers. It develops and operates dual-use orbital capabilities, including the secure, sovereign return of sensitive hardware and data, in-orbit demonstration and validation (IOD/IOV), and advanced space systems.

Company description

ATMOS was founded as a European company built on the values of freedom, democracy, equality, the rule of law, and human rights. We are committed to protect these values by making our technology available to others who share the same values, strengthening infrastructure and innovation for prosperity on Earth. Our team is multinational and diverse, with offices in Lichtenau and Strasbourg. We work in a collegial, hands-on culture where people support each other, take ownership, and keep learning every day. Motivation for the mission comes first — building spacecraft is not a nine-to-five pursuit. We align the mission, the team, and the individual in mutual dependence. This principle shapes our work environment where exceptional people, as committed as they are competent, can grow and contribute to a mission that matters.