Job
You are responsible for the security of our AI platform, conducting risk analyses, hardening Kubernetes environments, automating secrets management, and developing security monitoring to ensure safety.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are responsible for the technical security of our AI platform based on Kubernetes and StackIT.
- You conduct threat modeling and risk analyses for new AI applications.
- You accompany rollouts with security reviews and clear technical recommendations.
- You harden Kubernetes environments, for example through RBAC, Network Policies, Pod Security Standards, Admission Control, and Policy as Code.
- You work with existing Policy-as-Code approaches, particularly Kyverno.
- You secure the software supply chain, for example with signed container images, SBOMs, vulnerability scans, Trivy, and image hardening.
- You manage and automate Secrets Management with Vault, including identities, tokens, and certificate lifecycle management.
- You develop security monitoring further, for example with audit logs, security metrics, Prometheus, Grafana, Loki, and Alertmanager.
- You assist with vulnerability management and security incidents within the platform context.
- You translate requirements from BSI Grundschutz, ISO 27001, and GDPR into concrete technical measures.
- You advise DevOps and development teams to ensure that security is practically implemented in everyday operations.
Our expectations of you
Qualifications
- Very good understanding of Kubernetes Security, especially RBAC, Network Policies, Pod Security Standards, Admission Control, and Policy as Code.
- Experience with Secrets Management, ideally with Vault.
- Good understanding of Kubernetes, Terraform, Helm, and GitOps.
- Knowledge of BSI Basic Protection, ISO 27001, and GDPR.
- Pragmatic security mindset: You want to enable security, not unnecessarily complicate processes.
- Good German language skills (minimum C1 level) so that you can confidently communicate with internal teams, partners, and specialist departments.
Experience
- Several years of experience in the field of Cloud, Platform, or IT Security.
- Experience with container and supply chain security, such as Trivy, CVE management, image hardening, signed images, or SBOMs.
- Experience with Threat Modeling, Risk Analyses, or Security Incident Response.
- Experience with monitoring and logging solutions such as Prometheus, Grafana, Loki, and Alertmanager.
- Experience with C5, KRITIS, or NIS2 is a plus but not a must.
What we offer
- Approachable, value-driven leadership and corporate culture that support innovative and autonomous working.
- Motivated team and exciting, challenging tasks.
- Secure job with an attractive salary and usually permanent contracts.
- Flexible working hours: flexitime and up to 60% remote work.
- 30 vacation days + 3 paid days off per year.
- Workation: Up to 30 days within the European Economic Area (including Iceland, Liechtenstein, Norway, Switzerland) - with team coordination.
- Part-time studies, targeted further training, and talent management for personal development.
- Modern, centrally located offices with a rooftop terrace, underground parking, and a pleasant working environment.
- Corporate benefits, e.g., discounted Deutschlandticket, subsidized childcare, and rotating employee events.
Benefits
Work-Life-Integration
Health, fitness & fun
Higher take-home pay
Topics you will work on
Job locations
About your employer
The Anstalt für Kommunale Datenverarbeitung in Bayern is a leading IT service provider in Germany. As a complete provider, it supplies software solutions and services for all core areas of municipal administration.
- 1971
- Digital Agency
- Onsite, Hybrid
- Internet, IT, Telecommunication
Employer reviews
- Career growth
- 3.2
- Engineering
- 3.3
- Working conditions
- 4.0
- Team culture
- 3.5
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
