Cloud Platform Engineer (m/f/d)

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.

Cloud Platform Engineer (m/f/d)

Your tasks

• You own the design, maintenance, and continuous improvement of our Kubernetes infrastructure, including upgrades, resource planning, and cluster health across all environments (DEV, TEST, QA, PRE-PROD, PROD).
• You manage and extend our Helm chart library and ArgoCD App-of-Apps GitOps pipelines, ensuring all deployments are declarative, reproducible, and auditable.
• You operate and improve our CloudNativePG-based PostgreSQL fleet including backup strategies, failover testing, and schema migration workflows.
• You drive Infrastructure as Code practices across the team: defining, versioning, and reviewing all infrastructure changes through Git, with no manual snowflakes.
• You own our observability stack (Prometheus, Grafana, etc.) building dashboards, tuning alert rules, and ensuring on-call teams have actionable signals.
• You strengthen platform security: managing TLS certificates via cert-manager, configuring Keycloak integrations, and hardening the mTLS setup used for federated hospital connectivity.
• You collaborate closely with backend engineers to define container build standards, optimize CI/CD pipelines (GitHub Actions), and integrate security scanning into the delivery workflow.
• You work with our infrastructure provider STACKIT to plan capacity, coordinate Kubernetes upgrades, and maintain disaster recovery procedures.

Your profile

• You have hands-on experience running production Kubernetes clusters: upgrades, multi-namespace management, RBAC, resource quotas, and real incidents.
• You are fluent in Helm and GitOps tooling (ArgoCD or Flux); you write charts from scratch, not just deploy them.
• You are comfortable with PostgreSQL operations: replication, backup/restore, connection pooling, and performance tuning under load.
• You have experience with Infrastructure as Code and treat every manual click as technical debt.
• You know your way around an observability stack, writing PromQL, building Grafana dashboards, and designing alert thresholds that fire when it matters.
• Ideally, you have experience with cloud-native security concepts: mTLS, OAuth2/OIDC, certificate management, and network policies.
• Ideally, you have worked in a regulated or compliance-sensitive environment (healthcare, finance, government) where auditability and data protection are non-negotiable.
• You communicate clearly in English; German is a plus but not required.
• You are curious, self-directed, and energized by hard problems, you don't wait to be told what's broken.