DevOps / Platform Engineer (Cloud)

The project is for a client in the DACH region creating a compliance services platform for telecommunications customers. It involves building a cloud-native SaaS platform from scratch to support handling data release and protection orders in compliance with EU e-ID regulations. The system processes sensitive data related to criminal proceedings and must meet high security and data immutability standards with storage within the European Union territory.

• Minimum 4 years experience in DevOps or Platform Engineering
• Practical experience administering Kubernetes clusters
• Experience with managed Kubernetes services such as GKE, EKS, OVHcloud Managed Kubernetes, or IONOS
• Strong knowledge of Terraform or Pulumi
• Experience designing full CI/CD pipelines with GitLab CI or GitHub Actions
• Experience managing S3-compatible storage
• Knowledge of S3 Object Lock and WORM mechanisms
• Strong knowledge of Docker, container registries, and multi-stage builds
• Experience integrating code and dependency security scanning tools
• Familiarity with tools like Semgrep, CodeQL, SonarQube, Snyk, Trivy, or OWASP Dependency Check
• Experience configuring Keycloak or other OIDC and OAuth 2.0 identity providers
• Knowledge of secure secret management principles
• Experience with HashiCorp Vault, AWS Secrets Manager, or similar solutions
• Very good English and Polish language skills
• Ability to independently take responsibility for the full infrastructure layer of the project

Nice to have:

• Experience with European sovereign cloud providers such as OVHcloud, IONOS, or Hetzner
• Practical knowledge of AWS Bedrock and regional API endpoint configuration
• Experience with Kubernetes Network Policies
• Knowledge of Istio, Cilium, or other service mesh solutions
• Experience in environments requiring ISO 27001, BSI C5, or similar standards
• Knowledge of eBPF-based security tools like Falco or Tetragon
• Experience with GitOps and tools like ArgoCD or Flux
• Knowledge of Prometheus and Grafana
• German language skills useful for support with cloud providers

• Build and configure Kubernetes environments in the cloud (OVHcloud or IONOS) for dev, test, staging, and sandbox
• Implement infrastructure as code using Terraform or Pulumi to eliminate manual resource configuration
• Configure secure S3-compatible storage with Object Lock and WORM mechanisms
• Deploy and configure Keycloak for multi-tenant identity management with application integration
• Design and implement CI/CD pipelines including build, test, security scanning, and deployment processes
• Integrate SAST and SCA tools; enforce deployment blocking on critical vulnerabilities
• Configure container registry and image build and signing processes
• Ensure secure access to external services (e.g., AWS Bedrock) per project requirements
• Maintain infrastructure stability and availability including resource management, scaling, and environment isolation
• Implement network and cluster security policies (e.g., Network Policies)
• Manage secrets using HashiCorp Vault or cloud equivalents
• Maintain and enhance CI/CD pipelines and support development teams with environments, containerization, and deployment processes
• Monitor platform operation and costs including alerting and basic system monitoring