Responsibilities
- Operate and continuously improve our Kubernetes production platforms, contributing to zero-downtime upgrades and multi-AZ resilience as team-wide goals.
- Grow into the team’s expert on our ELK-based log platform — centralised cross-cluster monitoring and anomaly detection — so every service owner can see, alert on and debug their workload without SRE hand-holding.
- Maintain and evolve our Prometheus alerting rules and Grafana dashboards alongside the team.
- Partner with our Application Security Engineer on Kubernetes and container security — admission control, workload identity, secrets management, network segmentation and runtime threat detection — with an interest in growing into our security champion over time.
- Love automation. Chip away at operational toil — deployments, monitoring setup, internal reporting — building on the baseline the team already has, and ship reliably through our GitOps workflow (Flux, GitLab CI).
- Participate in our Standby and Daily Business rotation, lead incident response, run blameless post-mortems and drive the resulting action items to completion.
Requirements
- Several years hands-on SRE, DevOps or Platform Engineering, including meaningful time running production Kubernetes at scale.
- Strong Kubernetes expertise with deep hands-on experience in at least one area — cluster lifecycle and upgrades, workload identity and RBAC, admission control, network policies, or custom resources and operators — and working familiarity with the rest.
- Solid grasp of Kubernetes and container security — secrets management, network segmentation and runtime protection — and an interest in growing into our security champion alongside our Application Security Engineer.
- Proven depth in the ELK stack (or a very similar log platform) — pipelines, indexing, dashboards, alerting — with an interest in growing into the team’s observability expert. Working knowledge of Prometheus and Grafana.
- Comfortable with GitOps and CI/CD as a daily way of working (we run Flux and GitLab CI; equivalents like Argo CD, GitHub Actions or Jenkins are fine), and hands-on experience with Helm and Kustomize for managing manifests. Solid coding in Go, Python or Bash, with a love for automating away repetitive work.
- Comfortable being on-call and leading incidents calmly under pressure.
- Professional fluency in German and excellent English; at home working in a diverse team.
Nice to Have
- Experience in regulated industries (financial services, legal, healthcare, defence) or under compliance frameworks such as ISO 27001 or C5.
- Track record of designing or contributing to custom Kubernetes Operators.
- Service-mesh experience (Istio, Linkerd, Cilium).
- A demonstrated interest in working shoulder-to-shoulder with AppSec engineers to raise platform security posture.
- Experience operating Couchbase (Couchbase Operator, server groups, XDCR) or another stateful data platform on Kubernetes.
- Experience migrating ingress controllers or other cluster-wide components with zero customer downtime.
- Experience with anomaly detection on platform telemetry.
Additional Information
- Professional fluency in German and excellent English required.
- Participate in Standby and Daily Business rotation.
- Lead incident response and run blameless post-mortems.
