Job
In this role, you design the architecture and security concepts of the Pradtke Cloud, implement Terraform, and manage Kubernetes platforms to securely support clients in the healthcare sector.
Job summary
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You shape the Pradtke Cloud: its architecture, operating model, and security concept. You help decide how our multi-tenant model scales as we grow from ten customers to a hundred, what we operate ourselves, and what we leave to STACKIT or Cloudpunks. And you document these decisions so they’re still easy to understand two years from now.
- You ensure secure operations: policies in Kyverno, runtime security with Falco, scans with Trivy, secrets via External Secrets and STACKIT Secrets Manager, and identity management through Keycloak with a realm per tenant. You bring it all together, close gaps, handle hardening, patching, backup and recovery—and demonstrate that it works. Our customers are hospitals and fire departments; their requirements for information security and data protection are your benchmark.
- You get hands-on: Terraform, Flux, Kustomize, Helm, Envoy Gateway, cert-manager. You move changes cleanly from test to production, keep Renovate updates and operator versions under control, automate repetitive tasks—and lay the groundwork for our development teams to deploy their software independently and securely.
- You ensure the reliable availability of the Pradtke Cloud: alerting rules and dashboards in the Grafana stack, black-box checks, incident and change processes, postmortems, and the operations handbook. You take part in the on-call rotation—and build it in a way that your colleagues can support.
- You bring others on board: You empower colleagues in development and customer teams to take on operational tasks—with runbooks, training, and tools that work even when you’re not there.
- You work with our partners as equals: You manage the collaboration with Cloudpunks, bring their expertise in-house, and represent our requirements to STACKIT.
- You continue to develop the platform: keeping costs and capacity in view, planning for new customers and workloads, and testing new STACKIT services. You anticipate what TIMEOFFICE Air will need tomorrow—and build it in time.
Our expectations of you
Education
- German at least at C1 level—our customers, our documentation, and our audits are in German. A degree in computer science or a comparable qualification is a plus; demonstrable practical experience matters even more to us.
Qualifications
- In-depth hands-on experience with Kubernetes and GitOps—ideally with Flux, Kustomize, and Helm; if you come from the Argo CD ecosystem, you’ll get up to speed quickly. Plus Terraform and everything that goes with it: modules, state, linting, and reviews.
- You know Ingress, DNS, and TLS in Kubernetes from more than just tutorials: Gateway API, cert-manager, external-dns, NetworkPolicies—and you know what happens when one of them stops working.
- Observability is your craft: You build alerting with OpenTelemetry and the Grafana stack that only wakes you up at night when it has to—and dashboards that answer the right question in the morning.
- You have operated stateful services in and alongside Kubernetes—databases, message brokers, caches—and know what backup, recovery, and upgrades really entail.
- You can design and document: write an operating concept, justify an architectural decision, assess a risk—and explain it in a way that management can understand and an auditor can accept.
- You enjoy sharing your knowledge: you explain things patiently, document them so others can act on them, and are happy when colleagues take over tasks that previously only you could do.
- You work with service providers as equals: you challenge them, assess their work, and improve together. And you stand your ground even when senior management disagrees—especially on security matters—while remaining open to being persuaded by better arguments.
- A self-reliant, structured approach to work—and a desire to contribute to a self-organized team without traditional hierarchies.
Experience
- At least four years of experience operating production Kubernetes platforms—and a clear understanding of what it takes to build and run one. This role is therefore not suitable for entry-level candidates.
- Security isn’t a tedious task for you—it’s a fundamental mindset: Policy-as-Code, runtime security, image and cluster scans, secrets management, OIDC, and identity providers such as Keycloak. Experience with ISO 27001, BSI C5, or KRITIS requirements is a plus.
What we offer
- Building, not maintaining: You decide how a market leader runs its cloud—with a new generation of software on the market and customers who depend on reliability.
- A setup that’s ready to go: Pradtke Cloud is built, Cloudpunks remain on board as a partner, and STACKIT is directly accessible. You’re not starting from scratch—but you are starting. TIMEOFFICE continues to run on customers’ premises as well; your focus, however, is clearly on the cloud.
- Direct access to senior management: short lines of communication, quick decisions, and genuine involvement in strategic matters—including budget and tools.
- On-call duty on a rotating basis—clearly defined, compensated, and designed to be shared across the team.
- Meaningful work: Our software powers the day-to-day work of more than 300,000 people in healthcare and emergency services. When your platform runs, staffing runs smoothly in hospitals and fire departments.
- An organization that values personal responsibility and team autonomy—and where you share in the company’s success as a co-entrepreneur.
- A full-time position with a permanent employment contract, flexible working hours, and a wide range of benefits—from company pension contributions and corporate fitness to a company bike scheme. Time and budget for professional development and certifications are included.
- An outstanding office: Our Pradtke HQ in Bochum has been named one of the “Best Workspaces 2026” by Callwey Verlag. We’re usually on-site at least three days a week, and you can work flexibly the rest of the time.
- Above all, a supportive, collaborative team spirit that you feel every day.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Wir sind ein agiles Familienunternehmen in zweiter Generation mit Wurzeln im Ruhrgebiet. Software ist unser Medium. Strategisch mehrwertiges Personalmanagement und wirksame Führung sind unser Metier.
- Established Company
- Hybrid, Onsite
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
