DevOps Engineer (m/f/d)

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.

Context: The infrastructure is centrally managed and strictly separated from the application layer. We follow a "Shared Infrastructure" approach with multiple environment stages (Dev, QA, Prod) to reduce operational overhead. This infrastructure supports various applications developed by the product teams, including the SLM platform, the Support API, and the Assume Role application for C5-compliant customer data access.

The Impact You Will Create:

• Management and operation of Kubernetes clusters
• Infrastructure as Code (IaC): Provision and manage all STACKIT cloud resources and Kubernetes configurations using Terraform, Terragrunt, and Ansible.
• CI/CD / GitOps Management: Implement and maintain declarative deployments (e.g., ArgoCD / FluxCD) to ensure the live state of the cluster always matches the Git code repository.
• Observability & Monitoring: Manage the central observability stack in the infrastructure project. This includes maintaining Grafana, Thanos, Loki, and Grafana Alloy (Metrics Exporter) for cross-team monitoring of logs, metrics, and traces.
• Network & Security: Configure and manage the STACKIT Network Area (SNA) using private endpoints and security groups. Manage Ingress Controllers (Layer 7 routing), Service Mesh for internal encryption, and external access via the pfSense Wireguard VPN.
• Secret and Lifecycle Management: Manage the Secret Store (aaS) and the External Secrets Operator for infrastructure and application secrets.

Experience and Skills You will Need

• Deep experience in building cloud infrastructures using Terraform and ideally Ansible.
• Strong expertise in Kubernetes (SKE) administration and operating infrastructure add-ons according to the "Infrastructure Layering" model.
• Practical experience with GitOps tools (e.g., ArgoCD or FluxCD) and CI/CD pipelines (GitLab/Forgejo).
• Confident handling of modern observability plaforms (Prometheus ecosystem, Grafana, Loki, Thanos).
• Understanding of complex cloud network architectures, VPNs (Wireguard), and private IP routing (RFC 1918).
• Ideally, you have initial hands-on experience with the STACKIT ecosystem, including the use of their native SDKs, CLI, or the STACKIT Terraform provider to automate cloud infrastructure.

Our Offer

• 25 days annual leave + 1 day annual leave after 5 years in the company
• Meal tickets
• Additional health insurance
• A good work life balance with flexible working time
• A pleasant and diverse environment with regular events, team buildings and stimulating activities
• A huge array of tools & technologies available on the spot and ready for a steady personal development
• Variety of opportunities with one of the strongest and largest retail companies in the world
• You will be part of an international team composed of people from different countries and backgrounds
• Onboarding and support/mentoring