Application DevSecOps Engineer (m/w/d)
DACHS IT
WorldwideremotePosted 1 month ago
Skill Required
DevOps-EngineerSite-Reliability-EngineeringPlatform-EngineeringKubernetes-OperationsInfrastructure-EngineeringSenior-Application-Security-EngineerSenior-DevSecOps-DeveloperSenior-DevSecOps-EngineerDevSecOps-EngineerCloud-DevSecOps-EngineerLead-Application-Security-EngineerApplication DevelopertroubleshootingObservabilityPostgreSQLKubernetesPrometheusnetworkingGitHub ActionsdebuggingRedisAnsibleMySQLDevOpsArgoCDGitVaultLinuxCloudHelmDNSCIFulltime
Key highlights
- Remote-first as a lived model
- 30 days of vacation per year that do not expire
- Annual profit-sharing participation
- Cost-covered training and certifications
- 24/7 on-call rotation (no shift work)
- Company car option depending on the role
Role overview
DACHS IT is seeking a DevOps Engineer to operate and maintain their openDesk Managed Service in day-to-day business. In this remote-first role, you will deploy, update, monitor, and troubleshoot openDesk across multiple tenant-separated Kubernetes clusters, working closely with the Platform-Team on supporting infrastructure. The position involves participating in 24/7 on-call rotation (no shift work) and contributing to a flat-feedback culture within a fully remote organization.
Responsibilities
- Deploy and update openDesk components via Helmfile/Helm-Diff over GitLab CI, including release and patch management
- Roll out supporting services via GitOps where possible
- Operate databases via team-operated operators (CNPG for PostgreSQL, MariaDB-Operator), including backup/restore, point-in-time recovery, and upgrades
- Manage application-specific secrets via ExternalSecrets against OpenBao
- Monitor the application through app-specific metrics, alerting rules, and work towards SLI/SLOs based on kube-prometheus-stack, Thanos, and Loki
- Operate supporting services in the openDesk context (Redis/Memcached, object storage, mail infrastructure, ClamAV/ICAP, Coturn)
- Perform troubleshooting/debugging across openDesk components and at the Kubernetes level, and document runbooks
- Automate operations and deployments and work at the interface with the Platform-Team
- Participate in on-call rotation together with the team for 24/7 operation
- Keep the openDesk Managed Service running in day-to-day business: deploying, updating, monitoring, and troubleshooting
- Work in a data-driven manner, automate recurring tasks, and incorporate security from the start
Requirements
- Secure proficiency with Kubernetes in operations (workloads, networking, RBAC, storage, troubleshooting)
- Experience with Helm; readiness and ideally experience with Helmfile and Helm-Diff
- Practical experience with CI-driven rollout (e.g., GitLab CI) and/or GitOps (Flux) as an operational model
- Experience with database operations (PostgreSQL/MariaDB), ideally via operators such as CNPG/CloudNativePG or MariaDB-Operator
- Experience with monitoring/observability (Prometheus/Grafana ecosystem) and alerting
- Solid Linux knowledge and automation mindset (e.g., Ansible, scripting)
- Willingness to participate in on-call rotation (24/7 service, no shift work)
- German and English at Business Level (C1/C2) in speaking and writing
- Empirically-agile mindset and strong problem-solving skills
- Operational responsibility and reliability in a 24/7 context
- Strong communicator and team player, with the ability to self-organize
- Security awareness (Security by Design, least privilege)
- Willingness to give and receive 360-degree feedback
Nice to have
- Experience with openDesk components (Nubus/Keycloak, OX App Suite, Nextcloud, Collabora, Jitsi, Element/Synapse, OpenProject, XWiki)
- Experience with secret management via ExternalSecrets and Vault/OpenBao
- Experience with supporting services (Redis/Memcached, object storage, mail infrastructure, ClamAV/ICAP, Coturn)
- Experience with multi-tenant operation across multiple clusters (namespace layout, tenant isolation)
- Certifications (e.g., CKA/CKS)
- Experience from IT operations of a Managed Service or SaaS
- Willingness for knowledge transfer within the team
Benefits
- Remote-first as a lived model — work from home office, shared office, or a mix, depending on where you are most productive
- Flexible working hours with autonomy over how you schedule your work across the week
- Interesting projects aligned to your profile and development (e.g., platform setup, cloud migration, automation, operations, technical customer trainings)
- Regular training and certifications with cost coverage and release time; internal knowledge exchange and peer sparring
- Modern hardware, appropriate software, and necessary equipment provided
- Fair fixed salary plus annual participation in company profit
- Option of a company car depending on the role
- Transparent feedback culture based on regular, honest conversations at eye level rather than mandatory annual reviews
- 30 days of vacation per year that do not expire, plus additional protection such as group accident insurance
- Regular team get-togethers, workshops, and excursions to foster real cohesion beyond the screen
Additional details
- openDesk is operated tenant-separated across multiple Kubernetes clusters; each customer receives dedicated namespaces for application, configuration, mail, and databases
- The openDesk application layer includes deployments of Nubus/Keycloak, OX App Suite, Nextcloud, Collabora, Jitsi, Element/Synapse, OpenProject, and XWiki
- Cluster, network, and shared building blocks (cert-manager, external-dns, external-secrets, Flux, kube-prometheus-stack, Thanos, Loki, OpenBao) are provided by the Platform-Team; you use them but do not operate them yourself
- On-call rotation is part of the role; it is a 24/7 service with no shift work
- The organization uses a 360-degree feedback model
- Originally posted on Himalayas