DevOps Engineer
Summary
Build and run Kubernetes-based platforms, automate CI/CD with GitLab, and embed observability and security into scalable web systems.
Responsibilities
- Collaborate closely with architects, developers, QA, and security teams to ensure smooth and reliable environment operations.
- Work in close partnership with the platform team, based on shared ownership, knowledge exchange, and mutual support.
- Own and operate containerized application platforms based on Docker and Kubernetes, ensuring reliability, scalability, and operational excellence.
- Design and deliver dynamic test environments at scale, including multiple parallel, per‑merge request (branch‑based) deployments.
- Build, maintain, and standardize CI/CD pipelines by creating reusable templates and components in GitLab CI.
- Drive deployment automation and GitOps practices.
- Identify operational bottlenecks and implement automation to reduce manual effort and improve delivery speed.
- Embed security‑by‑design across the SDLC, including pipeline hardening and automated security checks.
- Build and operate observability platforms: monitoring, logging, and diagnostics (Prometheus, Grafana, ELK/EFK/Loki, etc.).
- Participate in on‑call and incident response, including troubleshooting, root‑cause analysis, and post‑mortems.
- Take end‑to‑end ownership of the solutions you build, you run it.
- OOP, TDD, DDD, SOLID, Clean Code.
- Code reviews, pull requests, automation mindset.
- QA as part of cross‑functional team.
Requirements (Must‑have)
- 5+ years of experience as a DevOps Engineer or SRE in web‑based systems.
- Strong expertise in Docker: image building, maintenance, registries, Docker Compose.
- Hands‑on experience with Kubernetes: deployments, networking, ingress, secrets/configs, troubleshooting.
- CI/CD expertise with GitLab CI, including deployment automation (Helm or Kustomize).
- Experience with branch‑based / ephemer environments, or ability to design and deliver such a solution in practice.
- Observability know‑how: metrics, logs, and tracing with Grafana and related tooling.
- Ingress / reverse proxy experience (e.g. Traefik or similar): TLS, Let’s Encrypt, routing, mTLS.
- Security and IAM knowledge: OAuth2 / OIDC, SSO, token and permission management.
- Excellent communication skills, strong collaboration mindset, and willingness to help others.
Nice to have
- Production experience with ArgoCD / GitOps.
- Infrastructure as Code and configuration management using Terraform and Ansible (or equivalents).
- Backend stack exposure: primarily PHP, Go.
- Datastores and messaging: MariaDB (backup/restore, basic HA), RabbitMQ (monitoring, tuning).
- Cloud platforms: AWS, Azure, or GCP.
- Mobile CI/CD experience (bonus only): Fastlane, CodeMagic, Firebase App Distribution.
- German language skills.
Our stack
- Languages / Frameworks: PHP 8+ (Symfony 6+, Laravel 9+), JavaScript / TypeScript, Go, PHPUnit, Codeception, Flutter/Dart
- Databases & Messaging: MySQL, MariaDB, RabbitMQ, Kafka
- Infrastructure & Cloud: UNIX/Linux, Kubernetes, Cloud platforms (AWS / Azure / GCP)
- CI/CD & Delivery: GitLab CI, ArgoCD, CodeMagic, Fastlane
- Containerization & Deployment: Docker, Helm, Kustomize
- Testing & QA: Playwright, Python, Dart, Postman
- Observability & Reliability: Prometheus, Grafana, Sentry
- Security & IAM: OAuth2 / OIDC, SSO, Secrets & Access Management, TLS / Let’s Encrypt
- AI & Developer Tools: JetBrains AI, Cursor, RAG, Google Workspace (G Suite - ecosystem)
- Collaboration & Productivity: Jira, Requirements & Test Management for Jira, Confluence, Slack, IDE (freedom of choice), Google Workspace (G Suite)
Benefits and Perks
- Cafeteria system
- Training budget €800 per year
- Integration meetings (internal training, hackathon, integration trips and meetings)
- Referral Bonus
- Startup atmosphere
- No dress code
- Flexible hours and working format - remote or hybrid
- Modern office, Chillout zone, Standing desk, parking for bicycles, and a cloakroom with showers
- Regular office lunches and integration meetings