Senior Cloud Security Platform Engineer (m/f/d)

Company Overview

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

As a Senior Cloud Security Platform Engineer, you are responsible for the architecture and secure

operation of our sovereign cloud platform. You combine deep systems understanding (OpenStack,

Kubernetes) with top-tier automation skills to intercept and mitigate threats at hyperscale.

The Impact You Will Create

• Drive the architecture and resilient operation of security infrastructure within ourhigh-performance OpenStack and Kubernetes environments.
• Develop scalable automation solutions (in Go and Python) for security processes, enforcing Infrastructure as Code (IaC) as an uncompromising standard for alldeployments.
• Design and operate centralized Identity and Secret Management infrastructure (e.g. HashiCorp Vault, PKI, SPIFFE/SPIRE) to provide cryptographic primitives to product teams.
• Engineer and maintain dynamic Kubernetes guardrails using Admission Controllers and Policy-as-Code solutions (e.g., Kyverno, OPA Gatekeeper) to enforce strict Pod Security Standards.
• Conduct proactive threat hunting at the network and host levels (eBPF, Sysmon) and develop deterministic detection use cases (SIEM/SOAR) for the real-time analysis of massive telemetry streams.
• Architect, manage, and optimize our SIEM and EDR ecosystem (with a strong focus on SentinelOne), engineering high-fidelity detection rules and ensuring comprehensive endpoint telemetry across all cloud-native workloads.
• Act as a technical mentor for platform teams, enabling "Secure-by-Default" deployments through the provision of hardened architectures, paved roads, and APIs.
• Define and strictly monitor Security SLIs/SLOs, guaranteeing rapid degradation and recovery during incidents through rigorous Incident Response Engineering.
• Engage in the full lifecycle of our security services by championing a "you build it, you run it" philosophy and a blameless post-mortem culture to continuously harden our products.

Experience And Skills You Will Need

• "Security by Design" is not a buzzword to you, but a measurable architectural principle. You possess a deep understanding of distributed systems, failure domains and security overall.
• Deep, battle-tested expertise one or more of the following: securing Linux kernels and the Kubernetes Control Plane, with extensive experience leveraging primitives like AppArmor, SELinux, Seccomp, and eBPF.
• Strong software development and scripting capabilities, preferably in Go (Golang) and Python, alongside excellent Linux and Bash proficiency.
• Solid experience in designing complex SIEM architectures, performing high-throughput log parsing, and executing forensic network analysis.
• Proven experience with CI/CD pipelines, GitOps workflows, and IaC frameworks (e.g., Terraform, Ansible).
• Fluent English language skills (good German skills are a plus) for effective collaboration in an international engineering environment.

Our Offer

• 25 days annual leave + 1 day annual leave after 5 years in the company
• Meal tickets
• Additional health insurance
• A good work life balance with flexible working time
• A pleasant and diverse environment with regular events, team buildings and stimulating activities
• A huge array of tools & technologies available on the spot and ready for a steady personal development
• Variety of opportunities with one of the strongest and largest retail companies in the world
• You will be part of an international team composed of people from different countries and backgrounds
• Onboarding and support/mentoring