T-Cloud CCE Turbo DevOps Engineer (m/w/d) Crossplane, OpenTofu & Argo CD - Remote - Nearshore only

Für unseren Kunden suchen wir ab sofort einen T-Cloud CCE Turbo DevOps Engineer (m/w/d) Crossplane, OpenTofu & Argo CD für die voraussichtliche Dauer bis 06/2027 mit der Option auf Verlängerung. Der Einsatz ist in Vollzeit geplant. Das Projekt findet remote statt. Die Projektsprache ist Deutsch.

Wichtig: Wir suchen hier explizit nur nach Nearshore-Ressourcen. Bitte bewerben Sie sich nur, wenn dies auf Sie zutrifft.

Aufgaben:

- The Senior DevOps Engineer will contribute to the development and operation of one of our core products as part of the respective DevOps team. The role focuses on building, automating, securing, and operating cloud-native application and platform components. This includes infrastructure as code, GitOps-based deployments, CI/CD, cloud networking, container security, and reliable production operations. The engineer will take hands-on responsibility for improving the platform’s automation, availability, and operational readiness. They will work closely with software engineering, architecture, product, and security colleagues; strengthen deployment and recovery processes; and contribute technical expertise and working practices that help the team operate its services reliably at scale.

Must Have:

- T-Cloud CCE Turbo (Cloud Native 2.0, shared-node clusters, high availability across three availability zones)

- OpenTofu (Terraform-compatible IaC modules for compute, networking, storage, and DNS)

- Crossplane (TenantNetwork compositions for subnets, EIPs, SNAT, and namespaces)

- Argo CD / ApplicationSet (GitOps workload deployment from the platform-gitops repository)

- Helm (chart development and deployments)

- T-Cloud services: CCE, ECS, VPC, EIP, DNS, EVS, ELB, and NAT

- Linux (systemd, SSH, and firewalls)

- GitLab CI/CD (pipeline design, runner configuration, and stages)

- JFrog Xray (container image scanning and artifact management)

- GitOps workflows using Helm, Argo CD, and GitLab CI

- n8n Enterprise (Queue Mode, OIDC integration, and workflow export)

- PostgreSQL / CloudNativePG (CNPG) (CloudNativePG Operator, backups with pgBackRest, and WAL archiving)

- Traefik Ingress Controller (TLS 1.3 and routing)

- cert-manager (Let's Encrypt and automated certificate management)

- CCE workload security groups, VPC network ACLs, and egress EIPs

- Container hardening (non-root containers, read-only filesystems, and PSA Restricted)

- CNPG and pgBackRest (automated backups and point-in-time recovery)

- EVS snapshots

- Disaster recovery drills and recovery runbooks

- Very good written and spoken German skills