DevOps Engineer – Security Focus (m/w/d)

Job summary

The role builds, operates, and secures cloud infrastructure for a mobility platform supporting flexible public transport and on-demand services. Responsibilities include managing infrastructure as code with Terraform, securing CI/CD pipelines with automated security testing, handling vulnerabilities and identity access, and improving monitoring, incident response, and backup strategies. The work also supports data protection and audit requirements involving passenger data.

Benefits

Qualifications

• Degree in computer science or equivalent qualification
• At least 4 years of experience as a DevOps, SRE, or Platform Engineer
• Strong knowledge of Docker and Kubernetes
• Strong infrastructure-as-code skills, such as Terraform or Ansible
• Experience with at least one major cloud provider: AWS, Azure, or GCP
• Strong knowledge of CI/CD tools such as GitLab CI, GitHub Actions, or ArgoCD
• Demonstrated security experience, such as Secure SDLC, threat modeling, OWASP Top 10, or secrets management
• Monitoring and logging experience with tools such as Prometheus, Grafana, ELK, or Loki
• Experience with GDPR, ISO 27001, or TISAX
• Familiarity with KRITIS requirements or public transport
• Policy-as-code experience, such as OPA or Kyverno
• Knowledge of eBPF or service mesh technologies such as Istio or Linkerd
• Relevant certifications such as CKS, CISSP, OSCP, or CompTIA Security+

Responsibilities

• Build, operate, and improve cloud infrastructure using infrastructure as code, especially Terraform
• Design and operate secure CI/CD pipelines with automated SAST, DAST, SCA, and secret-scanning tests
• Harden the platform through container security, network segmentation, zero-trust principles, and secrets management
• Identify, prioritize, and patch vulnerabilities
• Improve monitoring, logging, and alerting, including observability and SIEM integration
• Participate in incident response and on-call processes and promote effective post-mortems
• Develop identity and access management based on least-privilege principles
• Advise and enable development teams in secure software development and DevSecOps
• Support GDPR, privacy, and audit requirements, particularly for passenger data
• Improve recovery and backup strategies

Skills

Certifications

Degrees

Work schedule

Industry

Relocation