Senior DevOps Engineer (f/m/d)

<p> </p> <p><strong>Mission Brief</strong></p> <p><span data-contrast="auto">As a <strong>Senior DevOps Platform Engineer</strong>, you will play a key role in building and evolving the Software Platform capabilities used across Ground Systems. You will enable engineering teams with scalable, secure, and efficient development workflows while continuously improving developer productivity and software delivery.</span><span data-ccp-props="{"201341983":0,"335551550":6,"335551620":6,"335559740":360}"> </span></p> <p><span data-contrast="auto">Specifically, this is a hands-on platform engineering role with a strong infrastructure core.

Your mission is to own the runtime that Ground Systems software runs on both the on-premise Kubernetes clusters and the cloud services around them and the developer experience of getting software onto it. You will design cluster architecture, build the automation that provisions and maintains clusters across environments, and maintain the reusable delivery platform (GitLab CI/CD library, container toolchains, Helm charts, IaC modules) that product teams consume.</span> <br> <br><strong>Your role in our Space Mission...</strong></p> <ul> <li><span data-contrast="auto"><span data-ccp-parastyle="Normal (Web)">Own and continuously evolve software platform capabilities enabling secure, reliable, and efficient software delivery</span></span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335551550":1,"335551620":1,"335559740":360}"> </span></li> <li><span data-contrast="auto">Design and evolve the architecture of on-premise and cloud-hosted Kubernetes clusters and the surrounding platform: control-plane/worker topology, networking, storage, secrets management, and multi-environment promotion models.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Make and document architecture decisions as ADRs and standards that other teams build against, balancing reliability, operability, cost, and delivery speed.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Build and maintain automation that initialize, upgrades, and recovers clusters end to end as well as certificate lifecycle, node drains and upgrades, storage provisioning and incident management.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Provision the on-premise and cloud-hosted substrate with Terraform and configure it with Ansible: HAProxy load balancers, NFS shares, DNS/resolv, secondary disks, domain joins.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Manage workloads with Helm: author, version, and maintain charts for application services and stateful components (Kafka, ClickHouse, MQTT brokers, MSSQL), with automated semVer releases driven from merge requests.</span></li> <li><span data-contrast="auto">Practice GitOps with ArgoCD: installation, Azure Entra ID SSO and RBAC, and reconciliation troubleshooting across clusters.</span></li> <li><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">Own shared GitLab CI/CD library for jobs, templates, rules, semVer/release/changelog automation</span></li> <li><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">Operate developer-facing platform tooling and the container toolchain behind those pipelines including observability.</span></li> </ul> <p><strong>What you´ll need to thrive...</strong></p> <ul> <li><span data-contrast="auto">5+ years in Platform Engineering, DevOps, Software Infrastructure or SRE-type roles.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Strong Linux proficiency, comfortable on the shell, troubleshooting systemd, networking, DNS, storage, permissions and file systems.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Deep Kubernetes experience beyond the managed-service basics: cluster bootstrapping, CNI, ingress/load balancing, storage classes, RBAC, upgrades, and cert management.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Strong hands-on GitLab CI/CD experience, including reusable components and pipeline-as-a-product maintenance.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Practical GitOps with ArgoCD</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Solid Microsoft Azure background: AKS, Container Registry, Key Vault, managed identity/service principals and least-privilege RBAC.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">IaC experience with Terraform and Ansible</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Comfortable with containerization: image building and hardening, Helm authoring and versioning.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Proven ability to design and document architecture, and to defend trade-offs to both engineers and stakeholders.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Scripting proficiency in Python, Bash and PowerShell.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}"> </span></li> <li><span data-contrast="auto">Pra