Application DevSecOps Engineer (m/w/d)
Core
Operate and maintain the openDesk Managed Service, ensuring 24x7 availability for multi-tenant Kubernetes clusters.
Role type
Senior DevOps Engineer (Kubernetes/Platform)
Builds
Multi-tenant openDesk application stack (Nextcloud, Keycloak, Collabora, etc.) across multiple Kubernetes clusters
Domain
SaaS / Managed Service / Cloud Infrastructure
Required skills
Kubernetes operations, Helm (Helmfile/Helm-Diff), GitLab CI/GitOps, PostgreSQL/MariaDB operators, Prometheus/Grafana monitoring, Linux, automation scripting, security by design
Preferred skills
openDesk components, ExternalSecrets/Vault, Redis/Object Storage/Mail infra, multi-cluster tenant isolation, CKA/CKS certification
Technologies
Kubernetes, Helmfile, Helm-Diff, GitLab CI, Flux, CNPG, MariaDB-Operator, ExternalSecrets, OpenBao, kube-prometheus-stack, Thanos, Loki, Redis, Memcached, ClamAV, Coturn
Responsibilities
Deploy and update openDesk components via Helmfile/Helm-Diff over GitLab CI; Operate databases via CNPG/MariaDB-Operator (backup, restore, upgrades); Manage application secrets via ExternalSecrets; Monitor application metrics and alerting based on Prometheus/Thanos/Loki; Operate supporting services (Redis, Object Storage, Mail, ClamAV, Coturn); Troubleshoot and debug application and Kubernetes issues; Automate operations and collaborate with Platform Team; Participate in 24x7 on-call rotation
Seniority
Senior, hands-on IC
