Cloud Operations Engineer (Sovereign Workspace)

Quick Facts

• Role: Cloud Operations Engineer (Sovereign Workspace)

Description

Design and provision sovereign cloud infrastructure for Kubernetes clusters, PostgreSQL databases, and S3-compatible object storage using Terraform. Own backup/restore, persistence layer optimization, IAM/SSO integration, and monitoring with Prometheus/Grafana, while automating deployments and operations with infrastructure-as-code and scripting.

Responsibilities

• Provision cloud infrastructure with Terraform for Kubernetes clusters, PostgreSQL databases, and object storage; ensure identical staging and production environments.

• Develop and manage production environments with Helm and GitOps workflows so the openDesk suite runs smoothly across tenant-capable clusters.

• Design and implement Velero backup strategies to back up cluster resources, persistent volumes, and application state stored in S3 object storage, and restore within a few minutes.

• Own the persistence layer and optimize and secure PostgreSQL and MariaDB clusters to ensure high availability and data integrity.

• Integrate IdP/SSO solutions such as Keycloak via OIDC/SAML to provide a secure, consistent login experience.

• Build a monitoring stack with Prometheus (PromQL) and Grafana; turn system metrics into actionable insights and proactive alerts.

• Replace manual procedures with code in Python, Go, or Bash; develop tools for self-healing and repeatable deployments.

Requirements

• Expert knowledge in Terraform, including state management, modular code development, and automation of infrastructure-level changes.

• Solid Kubernetes experience; CKA/CKS preferred; understanding of the interplay between pods, services, and ingresses.

• Proven experience with Velero for Kubernetes backup/restore and with object storage via S3-compatible APIs.

• Practical production experience with PostgreSQL and MariaDB, particularly High Availability (HA) plus backup/recovery strategies.

• Advanced knowledge of Prometheus and creating meaningful Grafana dashboards.

• Strong understanding of IAM/SSO workflows and protocols such as OAuth, OIDC, and SAML.

• Fluent German with the ability to provide technical customer support; English skills for collaboration in an international team.

Benefits

• 30 days of vacation

• Temporal and location flexibility

• Sport, mobility and health offers

• Individual further training opportunities

• Company vehicle for private use including a fuel card

• Attractive compensation