IoT Platform Engineer (m/w/d) – Cloud & Edge Connectivity

Job summary

The IoT Platform Engineer operates, automates, and secures a platform connecting production machinery to cloud services through edge devices, supporting live dashboards and OEE analysis. The role covers containerized workloads on Microsoft Azure, MQTT over TLS connectivity, PKI and identity management, CI/CD, observability, and PostgreSQL/TimescaleDB operations, with contributions to Python backend services.

Benefits

Qualifications

• Degree in computer science or a related field, or vocational training as an IT specialist with relevant experience
• Several years of experience operating containerized applications with Docker in production
• Kubernetes experience or willingness to develop expertise
• Confident use of Linux command line and solid networking knowledge, including TCP/IP, DNS, firewalls, and reverse proxies
• Strong understanding of TLS, X.509 certificates, and PKI
• Experience with a public cloud, preferably Microsoft Azure, including virtual machines, networking, DNS, storage, and backups
• Experience with Git and CI/CD, preferably GitLab
• Scripting experience with Bash and Python
• Experience with production monitoring and logging
• Very good German and good English skills
• Careful, security-conscious approach, with changes documented, tested, and supported by a rollback plan

Responsibilities

• Connect edge devices securely and reliably to the cloud using MQTT over TLS, and troubleshoot connectivity issues
• Enable over-the-air device updates
• Operate and develop the containerized platform on Microsoft Azure, including deployments, updates, rollbacks, and capacity planning
• Evaluate edge platforms and container orchestration options, and plan and execute migrations during live operations
• Operate the PKI for device and broker certificates, including issuance, revocation lists, and rotation
• Manage reverse proxy, automated certificates, domains, DNS records, and firewall rules
• Administer Keycloak identity and access management using OpenID Connect and single sign-on
• Maintain GitLab CI/CD pipelines, container registry, and reproducible versioned releases
• Operate monitoring, logging, and alerting with Prometheus, Grafana, and Loki
• Operate PostgreSQL and TimescaleDB, including backups, restores, data retention, and release-related migrations
• Harden hosts and containers, manage secrets, vulnerabilities, and patches, and respond to security incidents
• Automate recurring tasks and create validation and acceptance scripts using Bash and Python
• Contribute to Python backend services for data ingestion, health checks, and configuration
• Document operational procedures and incident runbooks, and coordinate Azure resources, permissions, and policies with IT

Skills

Degrees

Languages

Work schedule

Industry

Company size

Relocation