Platform Engineer - Security (f/m/d)

Digital Charging Solutions GmbH; Berlin; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Gym membership

Office lunch benefit

Personal development budget

Monthly mobility budget

Home office up to 2 days per week

Office in Berlin & Munich

Job summary

Digital Charging Solutions GmbH is seeking a Platform Engineer to embed security into its Azure-based cloud and platform foundations. You will design secure-by-default components, automate guardrails with Terraform, and enforce RBAC and least privilege across CI/CD pipelines.

Ideal candidates have hands-on Azure security, Kubernetes (AKS) expertise, and experience with IaC, GitOps, and observability tools. Join an international team driving secure, scalable mobility platforms.

Qualifications

• Strong hands-on experience with cloud security in Azure environments.
• Experience with Infrastructure as Code (Terraform) and CI/CD pipelines.
• Kubernetes experience (AKS preferred) and microservices/event-driven architectures.
• CI/CD and GitOps practices (Azure DevOps or equivalents).
• Linux fundamentals and scripting (Python/Shell).
• Security tooling exposure and ISO/27001/TISAX familiarity is a plus.

Responsibilities

• Design and operate secure-by-default cloud platform components on Azure (network, compute, Kubernetes, storage).
• Implement platform security guardrails and baseline configurations with IaC (Terraform).
• Define and enforce RBAC and least-privilege access and JIT capabilities.
• Embed security controls into CI/CD pipelines and manage secrets.
• Enable security monitoring, logging, and SIEM integration for threat detection.
• Collaborate with engineering to build a scalable Azure/Kubernetes platform with self-service tooling.

Skills

Azure security

IaC automation

CI/CD pipelines

Kubernetes

Linux scripting

Ansible

Tools

Terraform

Azure DevOps

GitOps

OpenTelemetry

Prometheus

Grafana

Job description

Make an Impact by:

The Platform Engineer is accountable for embedding security into DCS’s cloud and platform foundations, ensuring that security controls are designed, implemented, automated, and operated as part of the platform lifecycle rather than treated as an afterthought.
This role acts as a technical security enabler for the platform, working closely with the Information Security Officer to ensure that security requirements are translated into scalable, reliable, and auditable technical controls across cloud infrastructure, CI/CD pipelines, and identity platforms.

• Design and operate secure-by-default cloud platform components on Azure, including network, computer, Kubernetes, and storage security.

• Implement platform-level security guardrails and baseline configurations using Infrastructure as Code (e.g., Terraform).

• Define and enforce strong identity, access, and privilege management (RBAC, least privilege, JIT/privileged access).

• Embed security controls into CI/CD pipelines (secure builds, secrets management, dependency and artifact integrity) following DevSecOps best practices.

• Enable security monitoring, logging, and SIEM integration; facilitate incident result and platform-level threat detection.

• Build vulnerability management, secure patching, and compliance with security frameworks (e.g., ISO 27001, TISAX).
  Partner with engineering teams to build, operate, and continuously improve a reliable, scalable Azure/Kubernetes platform, including developer self-service and operational support

Your Profile

• Strong hands-on experience with cloud security in Azure environments, including designing and implementing security controls.
• Proven experience implementing security through automation using Infrastructure as Code (Terraform), CI/CD pipelines, and policy-as-code.
• Hands-on expertise with Kubernetes (preferably AKS) and microservices / event-focused architectures.
• Experience with CI/CD and GitOps practices (Azure DevOps or equivalent tools).
• Strong Linux fundamentals and scripting skills (Python and/or Shell) for automation; configuration management tools (e.g., Ansible) are a plus.
• Experience with monitoring, observability, and platform security tooling (e.g., OpenTelemetry, Prometheus/Grafana, container security tools), with exposure to DevSecOps and compliance frameworks (ISO 27001, TISAX) considered an advantage.

We Offer:

• A unique opportunity combining the energy of a scale up with the power of
  BMW, Mercedes Benz Mobility & bp
• Working on products & services with a high social impact
• An international team of talented people who love what they do and live a collaborative spirit
• An open minded culture with room for growth and the freedom to bring in own ideas
• Subsidized gym membership
• Subsidized office lunch benefit
• Personal development budget for your professional growth
• Monthly mobility budgetUp to 2 days of home office in a week
• Offsite/ team events & much more and modern, sunny offices in Berlin & Munich

… and of course the classics: delicious coffee & tea, fresh fruits and an office dog friendly environment

At DCS we acknowledge the value of diversity, promote equality and challenge unfair discrimination. We strive to create an inclusive work environment, safe for anyone regardless of their gender identity, sexual orientation, abilities, ethnicity or race. We have the clear goal of driving diversity and inclusion across all dimensions and treat each applicant with the same respect and consideration.

seniority: experienced
schedule: full-time
employmentType: permanent
Job location: Berlin, Rosenstrasse 18–19, 10178, DE
Job location: Munich, Mies-van-der-Rohe-Strasse 6, München, Bayern, 80807, DE