Job
- Level
- Senior
- Job Field
- IT, DevOps
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Frechen
- Working Model
- Onsite
Job Summary
In this role, you will enhance our multi-cloud infrastructure, automate processes using IaC, CI/CD pipelines, and manage monitoring and security to maintain a stable cloud ecosystem.
Job Technologies
Your role in the team
- Bringing a piece of art to the world is millimeter work – so is the infrastructure behind it.
- Our platforms run on a multi-cloud environment consisting of Azure AKS and Hetzner Cloud, fully described as code and deployed via GitOps.
- This part runs reliably and largely self-sufficiently — good enough that we now want to extend the same approach to the remaining, historically grown infrastructure that has so far been outside our IaC.
- You will become part of our DevOps team within IT-OPS - one of the three areas of our Business-Technology-Services team (BTS), alongside DPM and Dev, which we are currently expanding to three permanent staff members - and you will significantly influence the technical design of this platform: thoughtfully automated, transparent, and built in a way that operations remain the exception rather than becoming a permanent occupation.
- The role is intentionally broad - you work across the entire stack and have real scope for creativity:
- You operate and further develop our multi-cloud platform - Azure AKS and Hetzner Cloud (k3s) - and gradually consolidate our existing on-premises environment.
- You further develop our Infrastructure-as-Code foundation with OpenTofu and Terragrunt and automate our VM and on-premises landscape with Ansible.
- You are responsible for our entire delivery chain - from GitLab CI pipelines, container builds, and quality gates to GitOps rollout (ArgoCD, Kustomize, Helm) across Dev, Test, Acceptance, and Production environments - including the tooling landscape behind it (GitLab, Registry, Runner).
- You will further develop our monitoring and observability (Grafana, Prometheus/Thanos, Loki, Tempo).
- You are responsible for secret, certificate, and backup management (External Secrets Operator with Azure KeyVault, cert-manager, Velero) as well as our security tools (Trivy, Falco, OAuth2 Proxy) and the identity integration via Entra ID.
- You manage our network across both clouds - firewalls (Azure, OPNsense), the site-to-site VPN between Azure and Hetzner, as well as the ingress layer based on the Gateway API (Envoy Gateway).
- You drive automation and standardization forward — so that recurring operational effort disappears instead of accumulating — and gradually bring our previously unmanaged legacy infrastructure under the same standards and into our IaC.
- AI is already part of our daily routine: changes undergo automated, AI-supported reviews locally before reaching the remote team.
- You continue to develop such workflows and intentionally design our infrastructure to be extendable with AI — up to interfaces through which agentic AI can safely interact with our systems.
- You contribute your experience to the strategic development of the platform, for example, in the meaningful distribution of workloads between Azure, Hetzner, and on-premises.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Hands-on experience with GitOps (ArgoCD/Flux, Kustomize/Helm) and CI/CD including container builds, ideally with GitLab CI.
- Proficient in at least one Public Cloud, with an interest in Multi-Cloud setups.
- Solid understanding of networking and security fundamentals - Firewalls, VPN/IPsec, DNS and Ingress as well as Secret Management and Identity/SSO.
- Secure automation with Python (Bash naturally, Go an advantage).
- Confident handling of agentic AI in daily work and interest in intentionally designing infrastructure to be AI-expandable.
- Nobody has all of this - more important than any individual point are depth in core areas (Kubernetes, IaC, a Public Cloud) and the curiosity to explore the rest.
- You love to dive deep into systems, address root causes instead of symptoms, and automate problems away permanently.
- You think strategically and keep an overview even in established systems.
- You enjoy taking responsibility and actively shaping the technical direction of our platform.
- You enjoy sharing your knowledge and supporting others in the team.
- You communicate confidently in German and English (C1 level), even with non-technical stakeholders.
Experience
- Several years of experience with Kubernetes in production, ideally across multiple clusters.
- Extensive experience with Infrastructure as Code (OpenTofu/Terraform, Terragrunt) and configuration management with Ansible.
- Experience with an observability stack centered around Prometheus and Grafana.
- Experience in consolidating mature environments and bringing them into a maintainable, automated state.
- Certifications such as CKA or Azure are a plus, but not a must - practical experience is more important to us.
This text has been machine translated. Show original
What we offer
- This is not a role where you just manage a finished system - but also not a leap into chaos.
- Our core, described as code, runs stably; your task is to extend this proven approach to the parts of the infrastructure that are not yet covered.
- The platform is consistently built as Infrastructure as Code: no knowledge is stored in individual minds, everything is declared, readable, and reproducible.
- You work in a fixed team of three, supplemented by external specialists as needed — close to the decision-making process and with direct communication lines to Dev and DPM.
- For someone who loves technology, enjoys diving deep, and solves issues permanently, this is a rare opportunity to truly shape a platform.
This text has been machine translated. Show original
Topics that you deal with on the job
Job Locations
This is your employer
Hasenkamp GmbH
Hasenkamp Holding GmbH is a traditional family-run business in its fifth generation based in Cologne-Frechen, specializing in logistics services. It ensures safe transport, professional installation, and conservationally sound storage for art, high-tech devices, interiors, relocations, and archives. Sustainability is a key aspect of the company's operations.
Description
- Company Type
- Established Company
- Working Model
- Onsite
- Industry
- Logistics, Transportation