Build with us.
Shape the future.

The short version

We're building the compliance layer that every connected product manufacturer in Europe is going to need by 2027. Kunnus handles SBOMs, vulnerability tracking, CRA controls, and audit-readiness — all in one platform. We're a tiny team. We move fast. We want someone who can ship a new feature in the morning and make sure the infra holding it up doesn't fall over by afternoon.

Alongside the product, we run a tech consultancy — Think Ahead Technologies — where we help clients solve hard infrastructure and software problems. You'll occasionally work on consulting engagements too, which means exposure to a wide range of stacks and challenges, and it keeps the work varied.

What you'll actually do

You won't be handed a Jira ticket and told to implement a button. You'll help us figure out what to build next, own it end to end, and make sure it's running reliably in production.

On any given week you might:

• Build and ship new product features across the full stack — Next.js + TypeScript on the frontend, Rust and Go on the backend
• Design and maintain our Kubernetes infrastructure on Hetzner — IaC, CI/CD pipelines, Talos cluster management
• Wire up integrations with CVE databases, SBOM formats (CycloneDX, SPDX), and customer PLM systems
• Harden security posture — we're a security compliance product, so eating our own dogfood matters
• Contribute to our open source tooling and help grow the community around it
• Support consulting clients with architecture, infrastructure, or development challenges
• Help define architecture decisions that will still make sense when we're 10x the size

You're probably a good fit if

• You've built and deployed production web applications before — and you've also been the one on-call when something breaks at 2am
• You understand that "DevOps" is a mindset, not a job title — you care about the full lifecycle of what you ship
• You're comfortable with ambiguity and genuinely enjoy turning a fuzzy problem into a working system
• You find EU cybersecurity regulation interesting, not just a compliance checkbox (or you're willing to learn why it matters)
• You'd rather over-communicate on a hard tradeoff than silently make a bad call
• You enjoy the variety that consulting brings — different clients, different problems, different constraints

You'll thrive here if

• You want co-ownership of a product, not just a role in it
• You like small teams where your opinion actually shapes what gets built
• You're energized by a market with a hard regulatory deadline (CRA enforcement starts December 2027 — that's a forcing function, not a threat)
• You care about data sovereignty — running on European infrastructure isn't just a selling point to you, it's the right call
• You think infrastructure is a product feature, not a background chore

The stack (honest, not aspirational)

— and we're pragmatic about adding tools when they earn their place.