IT Engineer
Black Forest LabsGenerative AI company
Freiburg, Germany€95,000 - €110,000Mid
Andreessen Horowitz
General Catalyst
Salesforce Ventures
Nvidia
Temasek
Bain Capital Ventures
Software Engineering
About the role
TL;DR
Build automated, self-service, code-defined IT infrastructure for workforce enablement.
- •This is a build role, not a maintenance one.
- •You'll take a partially built environment that still runs largely on manual ClickOps and turn it into automated, self-service, code-defined infrastructure for workforce enablement.
- •Key Responsibilities Own the full endpoint lifecycle for our (currently all-macOS) fleet: purchasing, issuance, zero-touch setup, management, and retrieval.
- •Complete our MDM migration across the endpoint fleet.
- •Own identity and access across our SaaS vendor stack, and replace manual access administration with an automated joiner-mover-leaver lifecycle (SSO, SCIM, provisioning/de-provisioning).
- •Build automation and internal tooling to remove routine human work from the path to staff productivity.
- •Define IT infrastructure as code, with configuration, provisioning, and access managed in version control.
- •Requirements Hands-on IT / corporate engineering experience in a fast-growing startup, and comfortable being the primary day-to-day IT contact. macOS fleet management, MDM (Iru, Jamf, or similar), Apple Business Manager / ADE, and zero-touch provisioning experience.
- •Identity and access administration with an IdP, including SSO/SAML and SCIM-based lifecycle automation across SaaS applications.
- •Scripting and automation (e.g.
- •Python, shell) and hands-on infrastructure-as-code experience (e.g.
- •A security mindset for workforce systems: access, endpoints, and the tradeoffs between control and usability.
Required skills
SSOPythonBashTerraformIAMSAMLOAuth
Nice-to-have skills
AWSGoogle CloudAzureDockerKubernetesCI/CDGitHub ActionsJenkinsAnsibleNginx
Domain expertise
deeptechai
Benefits & perks
Equity, Travel costs covered
Tech stack
SSOPythonBashTerraformLinuxGitAWSGoogle CloudAzureDockerKubernetesCI/CDGitHub ActionsJenkinsAnsibleNginxOAuthSAMLVaultIAMMFA