Senior DevOps Engineer - Global Identity Platform

Job summary

This role involves shaping an Identity Platform used by a major European financial institution, working remotely from Germany. The Senior DevOps Engineer will be responsible for the end-to-end development of the Kubernetes platform (GKE), defining the technological roadmap, and ensuring compliance and security in a regulated banking environment. The position requires a hands-on architect who can communicate effectively with various stakeholders.

Benefits

Qualifications

• Several years of experience with Google Kubernetes Engine or other hyperscalers in production
• Proficiency in Terraform, Helm, ArgoCD/Flux, GitLab CI or similar, Prometheus/Grafana, Vault
• Think in declarative patterns, immutable infrastructure, and automated feedback loops
• Experience with IAM concepts, OIDC, SAML, mTLS, or Workload Identity is a plus
• Responsible for and further develop the Kubernetes platform
• Make well-founded technical decisions and document them comprehensibly (ADRs)
• Represent decisions to stakeholders up to Lead Architect level
• Establish standards for CI/CD, Infrastructure as Code, GitOps, Observability, Secret Management, Policy as Code
• Consider compliance, regulatory requirements (BaFin, DORA), audit security, and Zero-Trust principles as design parameters
• Work self-organized and communicate proactively in distributed teams
• Translate complex technical matters for Security Officers, Architects, and Senior Management
• Represent positions based on facts and experience, while remaining open to better arguments
• Value diligence, traceability, and reliability in a regulated banking environment
• Identify platform levers and proactively drive improvements
• Fluent in English, German is a plus

Responsibilities

• Co-shape an Identity Platform used by hundreds of thousands of employees and millions of customers
• Define the technical direction
• Actively drive platform evolution on Google Kubernetes Engine (GKE)
• Take end-to-end responsibility for the development of the Kubernetes platform (GKE)
• Manage cluster design and workload patterns
• Ensure multi-region resilience
• Define the technological roadmap
• Document architectural decisions transparently using ADRs (Architecture Decision Records)
• Build, operate, and secure modern deployment pipelines and GitOps workflows
• Utilize GitLab CI/GitHub Actions, ArgoCD/Flux, and Helm
• Define, deploy, and maintain cloud infrastructure automatically via Terraform
• Establish comprehensive monitoring solutions (Prometheus, Grafana, New Relic)
• Implement secret management (Vault, Google Secret Manager)
• Implement Policy-as-Code standards
• Integrate and operate modern identity and access systems (OIDC, SAML, mTLS, Workload Identity, Ping Identity Suite)
• Coordinate closely with internal Identity Engineering teams
• Ensure audit readiness and regulatory compliance (BaFin and DORA)
• Implement Zero-Trust principles
• Represent platform decisions and architectures to Lead Architects, Security Officers, and Top Management

Skills

Industry

Relocation