Senior DevOps Engineer

O projekcie We are looking for an experienced Senior DevOps Engineer to join a team building and operating modern cloud-native solutions, including enterprise and AI-powered platforms.

This is a hands-on senior role with real ownership of production infrastructure. You will work across Kubernetes, Infrastructure as Code, GitOps, networking, security, CI/CD, databases, and disaster recovery, while helping the team continuously improve automation, reliability, and operational readiness.

Tech Stack

• T-Cloud: CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, NAT
• Kubernetes
• OpenTofu / Terraform
• Crossplane
• Argo CD & GitOps
• Helm
• GitLab CI/CD
• JFrog Xray / Artifactory
• Traefik
• cert-manager
• PostgreSQL
• CloudNativePG
• pgBackRest
• n8n Enterprise
• Linux
• OIDC
• Container and network security

Project Description

You will join a team developing and operating a modern cloud-native platform on T-Cloud, supporting enterprise and AI-powered applications.

The infrastructure is designed for high availability, security, and resilience, with CCE Turbo Kubernetes clusters distributed across three availability zones. The environment follows Infrastructure as Code and GitOps principles, using OpenTofu, Crossplane, Argo CD, Helm, and GitLab CI/CD to automate infrastructure provisioning and application delivery.

This is much more than an infrastructure maintenance role. You will have the opportunity to shape, automate, secure, and continuously improve a sophisticated production environment while taking ownership of solutions from design through deployment and ongoing operations.

You will work closely with software engineers, architects, and security specialists in an international environment, contributing directly to platform reliability, scalability, security, and developer experience.

Project Setup

• Start: ASAP
• Contract until: 30 June 2027, with an opportunity for extension
• Workload: Full-time
• Location: 100% remote within the EU
• Language: Fluent English; German is a plus

Zakres obowiązków

• Design, build, and operate highly available cloud-native infrastructure on T-Cloud, including CCE Turbo clusters distributed across three availability zones
• Develop and maintain reusable OpenTofu modules for compute, networking, storage, and DNS
• Provide self-service tenant networking capabilities, including subnets, EIPs, SNAT, and namespaces, using Crossplane compositions
• Deliver applications through GitOps using Argo CD ApplicationSets and Helm charts that you author and maintain
• Design and maintain GitLab CI/CD pipelines and runners, integrating JFrog Xray image scanning into every release
• Operate the production application layer, including n8n Enterprise in queue mode with OIDC
• Operate PostgreSQL on Kubernetes with CloudNativePG
• Secure traffic end to end using Traefik, TLS 1.3, automated certificates via cert-manager, workload security groups, VPC network ACLs, and controlled egress
• Harden containerized workloads using non-root execution, read-only filesystems, and Pod Security Admission in restricted mode
• Own backup and disaster recovery processes, including pgBackRest backups, WAL archiving, point-in-time recovery, EVS snapshots, DR runbooks, and regular recovery drills
• Monitor and troubleshoot complex infrastructure and production issues and drive them through to resolution
• Continuously improve automation, documentation, security, platform reliability, and operational readiness
• Collaborate with software engineers, architects, and security teams to improve the overall platform
• Take end-to-end ownership of infrastructure solutions and actively contribute to the evolution of the platform

Wymagania We are looking for a senior engineer who combines strong cloud and Kubernetes expertise with hands-on production experience and an ownership mindset.

• Commercial, hands-on experience with T-Cloud is a must-have, particularly with CCE / CCE Turbo, ECS, VPC, EIP, DNS, EVS, ELB, and NAT
• Practical experience with CCE workload security groups and VPC network ACLs
• Senior-level experience operating Kubernetes in production in a DevOps, Platform Engineering, Cloud Engineering, or SRE role
• Strong Infrastructure as Code experience using OpenTofu or Terraform
• Hands-on experience implementing GitOps delivery with Argo CD and Helm
• Strong knowledge of GitLab CI/CD, including pipeline design, stages, automation, and runner configuration
• Good understanding of container security and hardening, including non-root workloads, read-only filesystems, and Kubernetes Pod Security Admission
• Solid Linux administration skills, including systemd, SSH, and firewalls
• Production experience with backup, restore, and disaster recovery processes
• Strong problem-solving and troubleshooting skills
• Ability to work independently and take ownership of technical solutions
• A proactive approach to automation, documentation, and continuous improvement
• Ability to collaborate effectively with development, architecture, and security teams in an international environment
• Fluent English

Nice to Have

• Knowledge of Crossplane, including compositions for infrastructure and networking provisioning
• Experience running n8n Enterprise or other workflow-automation platforms in production
• Experience operating PostgreSQL on Kubernetes, ideally using CloudNativePG and pgBackRest
• Knowledge of JFrog Xray / Artifactory, particularly container image scanning in CI/CD processes
• Experience with Traefik and cert-manager
• Knowledge of OIDC-based authentication
• Experience with AI-powered or cloud-native enterprise platforms
• Experienced in using AI tools in day-to-day workflow, for example to support automation, troubleshooting, documentation, or engineering productivity
• German language skills