Your tasks

• You own the design, maintenance, and continuous improvement of our Kubernetes infrastructure, including upgrades, resource planning, and cluster health across all environments (DEV, TEST, QA, PRE-PROD, PROD).

• You manage and extend our Helm chart library and ArgoCD App-of-Apps GitOps pipelines, ensuring all deployments are declarative, reproducible, and auditable.

• You operate and improve our CloudNativePG-based PostgreSQL fleet including backup strategies, failover testing, and schema migration workflows.

• You drive Infrastructure as Code practices across the team: defining, versioning, and reviewing all infrastructure changes through Git, with no manual snowflakes.

• You own our observability stack (Prometheus, Grafana, etc.) building dashboards, tuning alert rules, and ensuring on-call teams have actionable signals.

• You strengthen platform security: managing TLS certificates via cert-manager, configuring Keycloak integrations, and hardening the mTLS setup used for federated hospital connectivity.

• You collaborate closely with backend engineers to define container build standards, optimize CI/CD pipelines (GitHub Actions), and integrate security scanning into the delivery workflow.

• You work with our infrastructure provider STACKIT to plan capacity, coordinate Kubernetes upgrades, and maintain disaster recovery procedures.

Your profile

• You have hands-on experience running production Kubernetes clusters: upgrades, multi-namespace management, RBAC, resource quotas, and real incidents.

• You are fluent in Helm and GitOps tooling (ArgoCD or Flux); you write charts from scratch, not just deploy them.

• You are comfortable with PostgreSQL operations: replication, backup/restore, connection pooling, and performance tuning under load.

• You have experience with Infrastructure as Code and treat every manual click as technical debt.

• You know your way around an observability stack, writing PromQL, building Grafana dashboards, and designing alert thresholds that fire when it matters.

• Ideally, you have experience with cloud-native security concepts: mTLS, OAuth2/OIDC, certificate management, and network policies.

• Ideally, you have worked in a regulated or compliance-sensitive environment (healthcare, finance, government) where auditability and data protection are non-negotiable.

• You communicate clearly in English; German is a plus but not required.

• You are curious, self-directed, and energized by hard problems, you don't wait to be told what's broken.