SRE – Endpoint Factory - Madagascar
JOB DESCRIPTION SRE – Endpoint Factory Information Technology |
Ref.: DIA-2026-IT-10 |
■ Location | ■ Seniority | ■ Estimated duration | ■ Contract |
Madagascar – Remote | Senior – 5 to 10 years | 5 months to 1 year | To be confirmed |
ABOUT THE PROJECT
Our client, an international multi-entity group, is building a security-critical, privacy-first information system on its own on-premise infrastructure: hardened mobile and desktop applications, hardware-key authentication, legally isolated data for each group entity, and self-hosted finance and AI capabilities.
The programme is delivered by a senior, multi-disciplinary team working in two-week agile sprints, with compartmentalised access and a strong culture of security by design.
WORK ARRANGEMENT
This is a remote position: you will work from home, from Madagascar. No attendance at DI-Africa's offices is required.
THE ROLE
Run the endpoint factory: reproducible GrapheneOS phone images and hardened Linux desktop golden images, secure enrolment and traceable device batches for the whole fleet.
KEY RESPONSIBILITIES
● Build reproducible GrapheneOS phone images with always-on OS-level VPN.
● Build the hardened Linux desktop golden image (Tauri client, system i2pd, signed-update trust).
● Run secure device enrolment without exposing network configuration to end users.
● Apply two-person checks, serial tracking and provenance for every device batch.
● Prepare eSIM and USB kits and work with QA in the device lab.
TECHNICAL ENVIRONMENT
● Bash/Python, image automation.
● GrapheneOS, hardened Linux, Tauri, i2pd.
● eSIM provisioning, USB hardware keys.
PROFILE
Location | ● Based in Madagascar, working remotely from home. |
Experience | ● Senior – 5 to 10 years of relevant professional experience. |
Required skills | ● Reproducible imaging. ● Two-person factory controls. ● Serial / provenance tracking. ● Secure enrolment. |
Nice to have | ● Regional kiosk deployment. ● Customs-aware hardware batch management. |
Languages | ● Professional English required; French is a plus. |
Ways of working | ● Work independently on software development tasks. ● Write clean, straightforward, efficient code that meets acceptance criteria and specifications. ● Cover code with unit, property and integration tests where applicable. ● Write code documentation. ● Willingness to handle hardware: YubiKeys, HSMs, air-gapped machines, phone flashing. ● Comfortable working with compartmentalised access. ● Proactive, requiring minimal supervision or mentoring. ● Proactive in identifying potential problems and implementing solutions. ● Efficient time management and respect of deadlines. ● Practical experience with agile software development methods. |
HR Consulting · www.di-africa.com
Confidential – For recruitment purposes only
About DI-Africa
DI-Africa supports industrial, mining, oil & gas and services groups with their hiring across Africa: Employer of Record (EOR), recruitment & sourcing, payroll & compliance, immigration & work permits, international mobility, health insurance.
Our recruitment process
- Online application — acknowledgement within 48 hours.
- DI-Africa interview — conversation with a recruitment consultant.
- Client interview — short-list presented to the client.
- Offer & onboarding — we support you until your first day.