Job
- Level
- Senior
- Job Field
- IT, DevOps, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will establish security principles within the SDLC, optimize CI/CD pipelines using GitLab, harden container and cluster security, and integrate multi-cloud solutions to ensure a secure operating environment.
Job Technologies
Your role in the team
- We are a small, highly motivated team within a dynamically growing corporation.
- Our platform is consistently self-hosted and runs on Bare-Metal Kubernetes.
- We are looking for a Senior DevOps Engineer who takes ownership and communicates clearly in both German and English.
- Kube-Native Working: Using and further developing our self-hosted Kubernetes landscapes is part of your daily craft.
- Security-by-Design: You establish security principles firmly within the SDLC and ensure that security is considered from the very beginning.
- Infrastructure Protection: Your focus is on hardening container and cluster security to safeguard our environments.
- Supply Chain Security: You take responsibility for supply chain security and safeguard the path of the code into production.
- Secure pipelines: You actively contribute to pipeline security to detect vulnerabilities early.
- End-to-End Observability: Metrics, logs, and alerting are in your hands to ensure we have full transparency of the system status at all times.
- CI/CD Optimization: You build and improve automated pipelines based on GitLab CI/CD for our product teams.
- Secure operation: Data and messaging services are operated by you reliably and in compliance with the highest security standards.
- Access Management: Handling identities, API access, and secrets management are among your core competencies.
- Multi-Cloud Security: You integrate cloud solutions from AWS and Google and ensure their secure operation.
- Knowledge multiplier: Documentation and active knowledge sharing within the team are an essential part of professional work for you.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Technical Foundation: Linux know-how is a given for you, as well as confident handling of containerization and a deep understanding of networking (DNS, L4/L7, TLS).
- CI/CD in your blood: With Git, GitLab, and GitLab CI/CD, you work with absolute routine and efficiency.
- You have also worked with components such as ORY Hydra/Oathkeeper, RabbitMQ, Kafka, etcd, Redis, or Terraform.
- Bridge builder to development: Thanks to your interface competence, you understand the stack of developers (PHP/Symfony, Go, React, Dart/Flutter, Firebase, Discourse, SQL) and speak their language.
- Strong communication skills & agile: You communicate confidently in German and English, work independently, and are characterized by quick comprehension and a high willingness to learn.
- The certain extra: Ideally, you have already had some initial exposure to Threat Modeling or Policy-as-Code and are familiar with tools such as Trivy, Falco, cosign, Syft, or Grype.
Experience
- Extensive experience: You have several years of practical experience in the DevSecOps or Security Engineering environment and feel at home there.
- Extensive tooling: Your toolkit already includes experience with Kubernetes, Prometheus, Grafana, or Loki.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
blau direkt
Mit über 150 Mitarbeitern konzentrieren wir unsere Energie darauf, Versicherungsmaklern und Vertrieben die Arbeit einfacher zu machen. Der Schwerpunkt unseres Handelns konzentriert sich hierbei unentwegt auf die Prozessoptimierung im gesamten Vermittlungsverfahren.
Description
- Company Size
- 50-249 Employees
- Founding year
- 1999
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance