IT Cloud Engineer

Quick Facts

• Role: IT Cloud Engineer
• Focus: On-prem, self-hosted Kubernetes platform, secure cloud operations, CI/CD, secrets & identity management

Description

You will operate and continuously improve a self-hosted on-prem Kubernetes platform and define standards for deployments, operations, and security. The role includes designing storage integrations, running secrets and identity management, and steering in-house service development for design, quality, and production deployment. You will also build and govern CI/CD pipelines and manage backup, restore, and disaster recovery.

Responsibilities

• Operate and continuously improve the self-hosted on-prem Kubernetes platform (Rancher, Fleet, RKE2, GitOps)
• Define platform standards and best practices for deployment, operations, and security
• Design and operate storage integrations
• Architect and operate secrets and identity management (OpenBao/Vault, Keycloak, External Secrets Operator)
• Provide technical direction for in-house software development focused on design, quality, and deployment of internal services
• Build and govern CI/CD pipelines and manage artifacts/registry (GitLab Runner, Nexus)
• Operate and improve backup, restore, and disaster recovery (Velero) including security hardening

Requirements

• Degree in Computer Science or equivalent qualification/experience
• Several years of productive experience operating Kubernetes environments, ideally self-hosted
• Solid knowledge of GitOps (Fleet), Infrastructure as Code (Terraform), and CI/CD
• Experience with Secrets Management (Vault/OpenBao) and IAM (Keycloak, OIDC/OAuth)
• Proficiency in JavaScript, Python, or PHP; Bash scripting is an advantage
• Understanding of storage architectures and CSI connectivity
• Experience with security hardening and network segmentation
• Fluent German and advanced English
• Ability to obtain/undergo required security clearance by relevant authorities

Benefits

• Competitive compensation with special payments
• 30 vacation days plus additional days for special occasions
• Training opportunities and career development
• Employer-funded retirement provision
• Employee stock option program
• Subsidized car leasing and travel cost support
• Insurance special conditions and employee benefits with partner companies
• On-site amenities (nearby kindergarten, company doctor, canteen/cafeteria, cleaning service, fitness studio)
• Flexible working arrangements where possible