DevOps / Platform Engineer (Cloud)

You will join a project delivered for a client from the DACH region that is developing a compliance services platform for telecommunications companies. We are building a greenfield, multi-tenant, cloud-native SaaS platform that will support the processing of data production and preservation orders in accordance with the EU e-Evidence Regulation. The system will process sensitive data related to criminal proceedings, which means that it must meet strict security, data immutability, and EU data residency requirements from day one.

• Minimum 4 years of experience in DevOps or Platform Engineering
• Hands-on experience administering Kubernetes clusters
• Experience with managed Kubernetes services such as GKE, EKS, OVHcloud Managed Kubernetes, or IONOS
• Very good knowledge of Terraform or Pulumi
• Experience designing complete CI/CD pipelines in GitLab CI or GitHub Actions
• Experience managing S3-compatible storage
• Knowledge of S3 Object Lock or WORM mechanisms
• Very good knowledge of Docker, container registries, and multi-stage builds
• Experience integrating security scanning tools for source code and dependencies
• Knowledge of tools such as Semgrep, CodeQL, SonarQube, Snyk, Trivy, or OWASP Dependency Check
• Experience configuring Keycloak or another identity provider based on OIDC and OAuth 2.0
• Knowledge of secure secrets management practices
• Experience with HashiCorp Vault, AWS Secrets Manager, or similar
• Very good English and Polish language skills
• Independence and readiness to own the entire infrastructure layer of the project

Nice to have:

• Experience with European sovereign cloud providers such as OVHcloud, IONOS, or Hetzner
• Hands-on knowledge of AWS Bedrock and regional API endpoint configuration
• Experience with Kubernetes Network Policies
• Knowledge of Istio, Cilium, or other service mesh solutions
• Experience in environments subject to ISO 27001, BSI C5, or similar standards
• Knowledge of eBPF-based security tools such as Falco or Tetragon
• Experience with GitOps and tools such as ArgoCD or Flux
• Knowledge of Prometheus and Grafana
• German language skills

• Build and configure a cloud-based Kubernetes environment using OVHcloud or IONOS, including dev, test, staging, and sandbox environments
• Implement infrastructure as code using Terraform or Pulumi to eliminate manual resource configuration
• Configure secure S3-compatible storage with Object Lock and WORM mechanisms
• Implement and configure identity and access management with Keycloak, supporting multi-tenant and application integrations
• Design and implement CI/CD pipelines covering build, test, security scanning, and deployment
• Integrate SAST and SCA tools and implement deployment blocking for critical vulnerabilities
• Configure a container registry and processes for building and signing container images
• Ensure secure access to external services such as AWS Bedrock as per project requirements
• Maintain infrastructure stability and availability, including resource management, scaling, and environment isolation
• Implement security policies at the network and cluster levels, such as Network Policies
• Manage secrets and configure tools like HashiCorp Vault or equivalent cloud solutions
• Maintain and develop CI/CD pipelines and support the development team with environments, containerization, and deployment
• Monitor platform performance and costs, including alert configuration and basic system monitoring