Senior DevSecOps Lead (m/w/d/x) - Identity & Security

Telekom; Deutschland; Remote; EUR 90.000 - 130.000; Teilzeit

Zusammenfassung

T-Systems International GmbH is seeking a Senior DevSecOps Lead to own the Kubernetes platform on OTC/T-Cloud Sovereign and to embed security in the delivery pipeline. You will manage stateful services and infrastructure as code, while collaborating with cross-functional teams to ensure compliant, production-grade cloud workloads.

The role requires extensive hands-on experience with Kubernetes, IaC, and secure software supply chains in a regulated environment, with fluency in German and English.

Qualifikationen

• 8+ years’ experience operating Kubernetes platforms and IaC in production.
• Strong GitOps and CI/CD fundamentals with ArgoCD or comparable tools.
• Security-first mindset with supply chain security and secrets management.
• Experience in regulated/security-critical environments is a plus.

Aufgaben

• Build and operate Kubernetes platform (Helm, Gardener) on OTC and T-Cloud Sovereign.
• Govern infrastructure with Terraform/Terragrunt; deployments via GitOps.
• Manage stateful services (PostgreSQL, Kafka) on Kubernetes.
• Impart security into the delivery pipeline: scanning, signing, mTLS.
• Collaborate with backend, security, and test teams in code-review culture.

Kenntnisse

Kubernetes

Helm

Terraform

Terragrunt

ArgoCD

Docker

Linux

Bash

Python

CI/CD

Git

Gardener

CNPG

Strimzi Kafka

Open Telekom Cloud

Tools

Istio

Cosign

KICS

Kubeconform

Jobbeschreibung

# Senior DevSecOps Lead (m/w/d/x) - Identity & SecurityBerlin, Bonn, Darmstadt, Leinfelden-Echterdingen, MunichProfessionalRegular (Part Time Possible)T-Systems International GmbH## About this job## About the roleHelp us shape the next-generation identity provider for Germany’s healthcare telematics infrastructure (TI). You will enable millions of people covered by statutory health insurance to access digital healthcare services securely. This is a security-critical, regulated platform providing production-ready OAuth 2.0/OIDC identity services, hardware-backed cryptography, protection of personally identifiable information (PII) and audit-ready quality. The platform runs on Kubernetes in sovereign German cloud environments.As a **Senior DevSecOps Engineer**, you will be responsible for the underlying cloud platform: GitOps-driven Kubernetes environments on Open Telekom Cloud (OTC) and T-Cloud Sovereign, infrastructure as code, and a security-focused delivery pipeline throughout—from policy checks to software supply chain security. Your responsibilities will also include: * Building and operating the Kubernetes platform (Helm, Gardener) on Open Telekom Cloud (OTC) and T-Cloud Sovereign* Managing infrastructure using Terraform/Terragrunt and infrastructure as code, and deploying via GitOps with ArgoCD* Operating stateful platform services on Kubernetes, particularly PostgreSQL (CloudNativePG) and Apache Kafka (Strimzi)* Integrating security controls into the delivery pipeline, including policy and manifest scanning, image signing and secrets management* Securing ingress and service-to-service communication, including configuring mTLS proxies* Working closely with backend, security and test engineers in a strong code review and documentation culture## ## Your profile* Kubernetes 1.28+ / Helm, Terraform / Terragrunt, ArgoCD (GitOps), Docker, Linux, scripting (Bash / Python), CI/CD and Git* Gardener, CloudNativePG (CNPG), Strimzi Kafka, Open Telekom Cloud (OTC) / T-Cloud Sovereign, Istio, policy scanning (e.g. Kubeconform, KICS), image signing (Cosign), operation of Trusted Execution Environments (VAU), and experience with digital healthcare identities (gematik, eGK, eID)* More than eight years’ experience operating Kubernetes platforms and infrastructure-as-code solutions in production environments* Hands-on experience with GitOps (ArgoCD or comparable solutions) and strong knowledge of CI/CD* A security-first mindset, with a focus on supply chain security, policy as code and secrets management* Experience operating stateful workloads (PostgreSQL, Kafka) on Kubernetes* Experience in regulated or security-critical environments; certifications are an advantage, but demonstrable practical experience is what matters most* Fluent German and English, both written and spoken## ## About T-Systems International GmbHAt T-Systems, we provide our business customers with the right system solutions for their digital business. Our portfolio helps ensure that digital transformation reduces complexity, saves costs and makes everyday work easier. Our focus areas are connectivity, digital, cloud and infrastructure, and security. Let’s power higher performance!Is this the right role for you? Take the next step and apply online. We look forward to hearing from you!This position is also available part-time.People with severe disabilities will be given preference where candidates are equally qualified.