Senior DevOps Engineer

We are looking for an experienced Senior DevOps Engineer to join a team building and operating modern cloud-native solutions, including enterprise and AI-powered platforms.

Tech Stack:

• T-Cloud: CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, NAT

• Kubernetes

• OpenTofu / Terraform

• Crossplane

• Argo CD & GitOps

• Helm

• GitLab CI/CD

• JFrog Xray / Artifactory

• Traefik

• cert-manager

• PostgreSQL

• CloudNativePG

• pgBackRest

• n8n Enterprise

• Linux

• OIDC

• Container and network security

Required Qualifications:

• Commercial, hands-on experience with T-Cloud is a must-have, particularly with CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, and NAT

• Practical experience with CCE workload security groups and VPC network ACLs

• Senior-level experience operating Kubernetes in production in a DevOps, Platform Engineering, Cloud Engineering, or SRE role

• Strong Infrastructure as Code experience using OpenTofu or Terraform

• Hands-on experience implementing GitOps delivery with Argo CD and Helm

• Strong knowledge of GitLab CI/CD, including pipeline design, stages, automation, and runner configuration

• Good understanding of container security and hardening, including non-root workloads, read-only filesystems, and Kubernetes Pod Security Admission

• Solid Linux administration skills, including systemd, SSH, and firewalls

• Production experience with backup, restore, and disaster recovery processes

• Strong problem-solving and troubleshooting skills

• Ability to work independently and take ownership of technical solutions

• A proactive approach to automation, documentation, and continuous improvement

• Ability to collaborate effectively with development, architecture, and security teams in an international environment

• Fluent English

Nice to Have:

• Knowledge of Crossplane, including compositions for infrastructure and networking provisioning

• Experience running n8n Enterprise or other workflow-automation platforms in production

• Experience operating PostgreSQL on Kubernetes, ideally using CloudNativePG and pgBackRest

• Knowledge of JFrog Xray / Artifactory, particularly container image scanning in CI/CD processes

• Experience with Traefik and cert-manager

• Knowledge of OIDC-based authentication

• Experience with AI-powered or cloud-native enterprise platforms

• Experienced in using AI tools in day-to-day workflow, for example to support automation, troubleshooting, documentation, or engineering productivity

• German language skills

Project Description:

Project Setup:

• Start: ASAP

• Contract until: 30 June 2027, with an opportunity for extension

• Workload: Full-time

• Location: 100% remote within the EU

• Language: Fluent English; German is a plus

Scope of Services:

• Design, build, and operate highly available cloud-native infrastructure on T-Cloud, including CCE Turbo clusters distributed across three availability zones

• Develop and maintain reusable OpenTofu modules for compute, networking, storage, and DNS

• Provide self-service tenant networking capabilities, including subnets, EIPs, SNAT, and namespaces, using Crossplane compositions

• Deliver applications through GitOps using Argo CD ApplicationSets and Helm charts that you author and maintain

• Design and maintain GitLab CI/CD pipelines and runners, integrating JFrog Xray image scanning into every release

• Operate the production application layer, including n8n Enterprise in queue mode with OIDC

• Operate PostgreSQL on Kubernetes with CloudNativePG

• Secure traffic end to end using Traefik, TLS 1.3, automated certificates via cert-manager, workload security groups, VPC network ACLs, and controlled egress

• Harden containerized workloads using non-root execution, read-only filesystems, and Pod Security Admission in restricted mode

• Own backup and disaster recovery processes, including pgBackRest backups, WAL archiving, point-in-time recovery, EVS snapshots, DR runbooks, and regular recovery drills

• Monitor and troubleshoot complex infrastructure and production issues and drive them through to resolution

• Continuously improve automation, documentation, security, platform reliability, and operational readiness

• Collaborate with software engineers, architects, and security teams to improve the overall platform

• Take end-to-end ownership of infrastructure solutions and actively contribute to the evolution of the platform