DevOps Engineer (OpenShift & Kubernetes)

Cloud Platform & DevOps Engineer (OpenShift / Core Banking)

• Model: B2B | Full-time in 2026 Part-time / Advisory in 2027
• Location: 100% Remote
• Start: ASAP

Tech Landscape

• Platform: Red Hat OpenShift, Kubernetes, Helm, GitOps
• Security & Traffic: Ingress/Routes, mTLS, PKI, Certificate Lifecycle, Secrets Management, OIDC
• Pipelines & Workloads: Containerized Java (Spring Boot), Apache Kafka, Oracle, IBM DB2, JDBC
• Cloud & Tools: Enterprise Banking Infrastructure, GCP (nice to have)

The Mission

A major bank is moving its securities processing from an old mainframe to a modern, cloud-native OpenShift setup.

You won’t need to build clusters from scratch or write Helm charts from zero, the client provides the platform and base templates.

Your job is purely practical: configure the environments, secure the network connections, deploy the services via Helm, and make sure the apps talk smoothly to Kafka and backend databases (Oracle/DB2).

What You Will Do

• Shape the Target Environments: Tailor OpenShift namespaces, configure traffic ingress/routing, and establish the baseline environment configurations that test and production stages will replicate.
• Tackle Network & Security Plumbing: Map and validate firewall matrices; establish resilient, encrypted connections (mTLS, PKI) between Spring Boot services, Kafka event streams, and relational data stores (Oracle/DB2).
• Automate & Orchestrate: Parameterize Helm deployments via environment-specific values, implement GitOps release pipelines, and design failsafe upgrade and rollback paths.
• Document for Production Readiness: Translate architectural requirements into practical runbooks, connectivity sheets, and deployment guides to prepare operational teams for the live 2027 cutover.
• Collaborate Across Streams: Partner with database administrators, mainframe developers, and security architects to resolve integration blockers and align on identity (OIDC) and access configurations.

Who We Are Looking For

• OpenShift & Kubernetes Practitioner: Track record of managing workloads on Red Hat OpenShift within tightly regulated, enterprise-grade ecosystems.
• Deployment Automation Pro: Thorough understanding of Helm architecture, GitOps patterns, environment branching, and automated release rollbacks.
• Security-Minded Engineer: Practical expertise with enterprise secrets management, PKI, certificate distribution, and mutual TLS authentication.
• Integration Troubleshooter: Hands-on experience debugging connectivity issues between containerized Java applications, message brokers (Kafka), and enterprise relational databases.
• Works independently and is comfortable using English on a daily basis.

Bonus Points

• Ability to read technical documentation in German (vendor specifications).
• Prior exposure to Google Cloud Platform (GCP).
• Domain knowledge in securities processing, clearing, or corporate actions.