Platform Engineer (f/m/d) - Security

Digital Charging Solutions; Berlin; Hybrid; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Lunch subsidy

Mobility budget

Hybrid work (up to 2 days home office)

Offsite/team events

Office in Berlin & Munich

Modern offices and collaboration space

Zusammenfassung

Digital Charging Solutions is seeking a Platform Engineer to embed security into our cloud and platform foundations. You will partner with the Information Security Officer to translate requirements into scalable, auditable controls across Azure, CI/CD pipelines, and identity platforms.

Responsibilities include securing Azure/Kubernetes components, enforcing RBAC and least privilege, automating controls with Terraform, and enabling threat monitoring and vulnerability management.

Qualifikationen

• Hands-on cloud security in Azure with secure-by-default design.
• Automation of security controls via IaC and CI/CD pipelines.
• Kubernetes security expertise (AKS) and microservices knowledge.
• Experience with policy-as-code and governance frameworks.

Aufgaben

• Design and operate secure-by-default Azure/Kubernetes platform components.
• Implement platform guardrails and baseline configurations using IaC.
• Define RBAC, least privilege, and JIT access across platforms.
• Embed security into CI/CD pipelines and artifact integrity checks.
• Enable monitoring, logging, SIEM, and threat detection.
• Support vulnerability management and ISO/TISAX compliance.
• Collaborate with engineers to maintain a reliable, scalable platform.

Kenntnisse

Azure security

Terraform

Kubernetes (AKS)

CI/CD / GitOps

Python / Shell

Ansible

Cloud security automation

Monitoring / Observability

ISO 27001 / TISAX

Tools

Terraform

AKS

Azure DevOps

OpenTelemetry

Prometheus/Grafana

Ansible

Jobbeschreibung

The Platform Engineer is responsible for embedding security into DCS’s cloud and platform foundations, ensuring that security controls are designed, implemented, automated, and operated as part of the platform lifecycle rather than treated as an afterthought.

This role acts as a technical security enabler for the platform, working closely with the Information Security Officer to ensure that security requirements are translated into scalable, reliable, and auditable technical controls across cloud infrastructure, CI/CD pipelines, and identity platforms.

• Design and operate secure-by-default cloud platform components on Azure, including network, computer, Kubernetes, and storage security.
• Implement platform-level security guardrails and baseline configurations using Infrastructure as Code (e.g., Terraform).
• Define and enforce strong identity, access, and privilege management (RBAC, least privilege, JIT/privileged access).
• Embed security controls into CI/CD pipelines (secure builds, secrets management, dependency and artifact integrity) following DevSecOps best practices.
• Enable security monitoring, logging, and SIEM integration; support incident response and platform-level threat detection.
• Support vulnerability management, secure patching, and compliance with security frameworks (e.g., ISO 27001, TISAX).
• Collaborate with engineering teams to build, operate, and continuously improve a reliable, scalable Azure/Kubernetes platform, including developer self-service and operational support.

Your Profile

• Strong hands-on experience with cloud security in Azure environments, including designing and implementing security controls.
• Proven experience implementing security through automation using Infrastructure as Code (Terraform), CI/CD pipelines, and policy-as-code.
• Hands-on expertise with Kubernetes (preferably AKS) and microservices / event-driven architectures.
• Experience with CI/CD and GitOps practices (Azure DevOps or equivalent tools).
• Strong Linux fundamentals and scripting skills (Python and/or Shell) for automation; configuration management tools (e.g., Ansible) are a plus.
• Experience with monitoring, observability, and platform security tooling (e.g., OpenTelemetry, Prometheus/Grafana, container security tools), with exposure to DevSecOps and compliance frameworks (ISO 27001, TISAX) considered an advantage.

We Offer:

• A unique opportunity combining the energy of a scale up with the power of BMW, Mercedes Benz Mobility & bp
• Working on products & services with a high social impact
• An international team of talented people who love what they do and live a collaborative spirit
• An open minded culture with room for growth and the freedom to bring in own ideas
• Subsidized office lunch benefit
• Monthly mobility budget
• Up to 2 days of home office in a week
• Offsite/ team events & much more and modern, sunny offices in Berlin & Munich

… and of course the classics: delicious coffee & tea, fresh fruits and an office dog friendly environment

At DCS we acknowledge the value of diversity, promote equality and challenge unfair discrimination. We strive to create an inclusive work environment, safe for anyone regardless of their gender identity, sexual orientation, abilities, ethnicity or race. We have the clear goal of driving diversity and inclusion across all dimensions and treat each applicant with the same respect and consideration.