Senior Platform Engineer

DSwiss AG; Lisboa; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

25 days vacation

Meal allowance

Health insurance coverage

Public transportation allowance

Job summary

DSwiss AG is seeking a Senior Platform Engineer to help operate, stabilize, and incrementally modernize our on‑prem infrastructure. You will bridge legacy systems with IaC, automation and container workloads, while collaborating with Software Engineering to improve reliability, security and developer experience.

Focus on reducing operational friction, standardizing workflows, and enabling self-service capabilities while maintaining regulatory and security constraints.

Qualifications

• Fluent in English; German language skills are a plus.
• Experience with Kubernetes on-prem environments and integrating with existing platforms.
• Experience using Terraform for infrastructure-as-code in controlled, versioned environments.
• Hands-on Linux on-prem production experience with ownership of availability and performance.
• Strong experience with Puppet and Ansible for configuration management.
• Production experience with PostgreSQL administration, backups, and performance considerations.
• Experience operating Ceph storage, including capacity management and failure handling.
• CI/CD exposure with GitLab across manual and automated workflows.
• Familiarity with Artifactory for artifact management.
• Strong Python scripting and automation skills.
• Observability tooling with Zabbix and Grafana; Elastic Stack is a plus.
• Experience in on-call rotations, incident response and root-cause analysis.
• Solid understanding of on-prem networking concepts (VLANs, load balancing, DNS).
• Security/compliance requirements in regulated environments (ISO 27001, SOC 2, GDPR).
• Ability to document runbooks and release procedures clearly.

Responsibilities

• Introduce and operate Kubernetes-based workloads in on-prem environments.
• Incrementally modernize the platform toward containerized and declarative approaches.
• Design and evolve hybrid operational models with both VM-based and Kubernetes workloads.
• Operate, maintain, and modernize on-prem infrastructure ensuring availability and performance.
• Own day-to-day operations including troubleshooting, patches, upgrades, and capacity management.
• Manage and evolve Puppet and Ansible configurations for secure, auditable changes.
• Operate Ceph storage with capacity monitoring and performance analysis.
• Design, build, and operate internal platforms for deployment and runtime operations.
• Support and execute application releases with manual and automated processes.
• Build and maintain Python automation to reduce manual effort.
• Implement and operate monitoring and incident response using Zabbix and Grafana observability tooling.
• Participate in on-call rotation and drive root-cause analysis and fixes.
• Address operational risks across runtime, databases, storage, and CI/CD tooling.
• Ensure security, compliance, and audit requirements are embedded in daily operations.

Skills

Kubernetes

IaC

Python

On-prem

Security & compliance

On-call

Tools

Terraform

Puppet

Ansible

GitLab

Ceph

Zabbix

Grafana

Job description

As a Senior Platform Engineer, you will play a key role in executing the technical vision set by the Head of Infrastructure, with a strong focus on operating, stabilizing, and incrementally modernizing our on-premises infrastructure. The role balances hands-on ownership of existing platforms and legacy systems with the design and implementation of new, more automated and scalable capabilities.

Working closely with Software Engineering, you will help build and evolve internal platforms and shared services that improve reliability, security, and developer experience across both legacy and modern environments. Rather than a green-field cloud transformation, this role requires thoughtful integration - bridging current systems with newer platform approaches such as infrastructure-as-code, automation, and container-based workloads where appropriate.

Your work will focus on reducing operational friction, standardizing workflows, and introducing self-service capabilities in a way that respects regulatory, security, and on-prem constraints. By treating infrastructure and platforms as long-lived products, and by aligning closely with the Head of Infrastructure’s direction, you will help ensure a stable, secure foundation today while progressively enabling the next generation of our technical platform.

Job Responsibilities

• Introduce and operate Kubernetes-based workloads where appropriate, integrating them with existing on-prem infrastructure and operational processes.
• Incrementally modernize the platform by gradually migrating suitable services and workflows toward containerized and declarative approaches, without disrupting existing production systems.
• Design and evolve hybrid operational models, where legacy VM-based services and Kubernetes workloads coexist and are supported consistently.
• Operate, maintain, and incrementally modernize on-premises infrastructure and platforms, ensuring availability, security, and performance.
• Own day-to-day operations, including troubleshooting, patching, upgrades, and capacity management across Tomcat/Apache applications, PostgreSQL, and supporting services.
• Manage and evolve configuration management with Puppet and Ansible, ensuring consistent, secure, and auditable system changes.
• Operate and support Ceph storage, including capacity monitoring, performance analysis, and remediation of failures.
• Design, build, and operate internal platforms and shared services for application deployment and runtime operations, spanning VM-based and newer platform components.
• Support and execute application releases, working with both manual and automated processes and continuously improving reliability and repeatability.
• Build and maintain automation and tooling, primarily in Python, to reduce manual effort and improve operational consistency.
• Implement and operate monitoring, alerting, and incident response, using Zabbix and related observability tooling.
• Participate in an on-call rotation (weekends included), handling incidents, performing root-cause analysis, and driving corrective actions.
• Identify and address operational risks and improvement opportunities across application runtime, databases, storage, and CI/CD tooling.
• Ensure security, compliance, and audit requirements (ISO 27001, SOC 2, GDPR, etc.) are embedded into daily operations and system configurations.
• Maintain operational documentation, runbooks, and release procedures to support consistent execution and on-call readiness.
• Evaluate tools and automation with a pragmatic, on-prem-first approach, recommending changes that improve stability, security, and maintainability.

Job requirements

• Fluent in English (written and spoken), German language skills are a plus.
• Practical experience with Kubernetes, including introducing and operating it incrementally in on-prem environments alongside existing platforms.
• Experience using Terraform for infrastructure-as-code to manage shared services and infrastructure components in a controlled, versioned manner.
• Hands-on experience operating on-prem Linux infrastructure in production, with ownership of availability, performance, and reliability.
• Strong experience with configuration management using Puppet and Ansible.
• Production experience operating and troubleshooting Apache and Tomcat application stacks.
• Solid operational experience with PostgreSQL, including administration, backups, performance considerations, and incident support.
• Hands-on experience operating Ceph storage, including capacity management, performance analysis, and failure handling.
• Experience supporting CI/CD and release processes, ideally using GitLab, across both manual and automated workflows.
• Familiarity with artifact repositories such as Artifactory.
• Strong automation and scripting skills, primarily using Python.
• Experience implementing and operating monitoring and observability tooling such as Zabbix and Grafana LGTM stack. Elastic Stack knowledge a plus.
• Experience participating in on-call rotations, incident response, root-cause analysis, and remediation.
• Solid understanding of on-prem networking concepts, including VLANs, load balancing, firewalls, and DNS.
• Familiarity with security and compliance requirements in regulated environments, including certificate management, TLS, and auditability.
• Experience improving and operating release and change management processes in production systems.
• Ability to produce and maintain clear operational documentation and runbooks for day-to-day operations and on-call support.
• Demonstrated ability to integrate legacy systems with modern platform approaches without disrupting production workloads.
• 25 Days of Vacation: Recharge and thrive with above-market holiday time, reflecting our people-first approach to work-life balance.
• Empowered to Make an Impact: Every voice matters - you're encouraged to drive improvements, contribute ideas, and create real value from day one.
• Learn from the Best: Grow your skills in a high-performing, international team of experienced and talented professionals.
• Meal allowance, health insurance coverage, and public transportation allowance.
• Work for a company committed to sustainability—our data centers operate climate-neutral.