Solution Architect (Managed Services) (m/f/d)

We are looking for a team member who thinks cloud and solution architecture holistic: from the first idea to CI/CD, IT service management and security to the stable operation as a managed service. You feel at home in modern cloud and container environments, understand business requirements and translate them into robust, automated architectures.

Curiosity for new technologies and a pragmatic, empirical-agile mindset: You work with PoCs, measure, learn and develop solutions iteratively. DevOps and DevSecOps are your practice – including clean processes, security by design and automated deployments.

In exchange with customers, you will be confident – whether in the architecture workshop, in the design of ITIL processes or in reviews of CI/CD pipelines. You like to work in the team, take responsibility and organize yourself. You can master German and English safely in the project everyday.

As a Solution Architect, you create end-to-end solutions for our managed services and SaaS offers – from initial conception to ongoing operation: Analysis of business models, requirements and existing landscapes and development of target architectures for cloud and container platforms. Conception and implementation of CI/CD architectures: build processes, automated testing, deployments and pipelines (e.g. GitLab CI). Design of ITIL processes, integration of CI/CD in ITSM and active cooperation in change management.

In the DevSecOps context: Planning and implementation of PoCs in the cloud/container environment incl. Installation, maintenance/care of the environments, operation in cloud/datacenter setups and evaluation of the impact on connected systems. Automation of tests and deployment, installation of pipelines for automated builds (e.g. GitLab CI). Systematic handling of CVE Findings, integration of security checks in pipelines and versioned documentation of architectures and installations (e.g. in Git).

Managed Services / SaaS: Creation, migration and operation of cloud-based solutions such as openDesk, our AI offerings and other services – in own infrastructures as well as in customer blinds (e.g. AWS, IONOS). Responsibility for lifecycle management, release cycles, updates, backups, scaling and change management. Further development of the services: automation, IT security, monitoring, documentation and development of add-ons and integrations to extend the scope of functions. Active collaboration in upstream/open source projects by retrieving CI/CD improvements, stability and security fixes as well as new features.

In the openDesk environment and components, for example: Operation & maintenance of the Kubernetes-based platform incl. Deployment/Update of Stacks (Helm/GitLab CI, Rollouts/Rollbacks) and monitoring of pods, ingress, storage (PV/PVC), certificates and network guidelines. Identity & Access Management with Univention/Nubus/UCS: Management of the life cycle of users, groups and roles, connection of applications (Nextcloud, OX, further modules) to the central IAM incl. SSO (SAML/OIDC), roll mapping and commissioning. Operation of Open-Xchange/OX Guard (mail/groupware services, encryption, key/certificate management, policies, troubleshooting in integration/update topics). Management of Nextcloud instances (storage backend, quotas, apps, updates, performance/availability) and support for integration between OX and Nextcloud incl. Error analysis at interfaces.

Automation with Ansible: Identification of business processes and implementation in Ansible-Playbooks. Development and maintenance of ansible components, connection to target systems (including via REST) and integration into service portals for providing self-service processes.

Technical skills Must-have Multiannual experience in the planning and implementation of solutions in the cloud/container environment (e.g. Kubernetes). Practice in the design and implementation of CI/CD infrastructures and build processes (e.g. GitLab CI, automated tests, deployments and builds for PoCs). Experience in IT Service Management according to ITIL (process design, integration of CI/CD in ITIL processes, change management). DevOps/DevSecOps experience: Pipelines construction and operation Automation of tests and deployments Dealing with CVE Findings and Security Scans Operation of software in cloud and data center environments (including updates, monitoring, logging).

Experience in the design and introduction of Identity & Access Management (e.g. SSO via SAML/OIDC, role/right models, life cycle management of identities). Safe handling of Kubernetes (introduction of environments, helmet, creation/adjustment of Helm Charts, deployment/update automation, scaling, monitoring, establishment of release cycles). Experience with Git and Infrastructure as Code (e.g. Ansible) as well as good knowledge of modern networks, security (Firewalls, IAM, Policies) and Linux-based operating systems.

Nice-to-have Experience with:openDesk and components such as Univention/Nubus, Open-Xchange/OX Guard, Nextcloud Service Mesh (e.g. Istio, Linkerd) versatile Kubernetes clusters in AWS and/or IONOS cloud incl. Backup, update and scaling concepts as well as integration of resources such as databases, messaging, email infrastructure and storage.

Experience in the development of ansible playbooks for business process automation and integration into portals/self-service solutions. Certifications (e.g. Cloud/AWS, Kubernetes, ITIL)

Soft skills Must-have Embossed consultant set with high customer and service orientation. Experience in agile projects (e.g. Scrum, Kanban) and cooperation with cross-functional teams. Strong analytical skills: absorb requirements, analyze problems in a structured manner, develop practical solutions. Very good communication skills, sovereign appearance and the ability to lead stakeholders through complex architectural decisions. Hands-on mentality: You can not only design, but also implement PoCs and solutions. German and English at Business Level (C1/C2) in Word and Writing

Nice-to-have Certifications in agile environment (e.g. Scrum Master, Product Owner). Experience in moderation, conflict resolution and deescalation. Experience in training and knowledge transfer (trainings, workshops)

With DACHS IT, you should not just have a place, but a working environment that matches your life, strengths and goals. That's why we offer you: Remote-First as a living model We have been working remotely for years. You decide where you are most productive – home office, shared office or a mixture of both. Flexible working hours with personal responsibility You can share your work in the context of the projects in a flexible manner over the week. Reliability in the team and transparent communication are more important than presence at the desk. Exciting projects instead of routine tickets Together, we find projects that match your profile and development, such as platform construction, cloud migration, automation, operations or technical training at customers. Training, certifications & knowledge exchange Regular trainings and certifications are planned – with cost acceptance and release. In addition, internal knowledge exchanges, Sparrings at eye level and space come to develop you professionally and methodically. Modern equipment and working environment You get modern hardware, the right software and the equipment you need to work efficiently and comfortably. Attractive framework conditions In addition to a fair fixed salary, you get an annual stake in the company's profit. Depending on the role, there is also the option on a company car. Transparent feedback culture & development We do not focus on annual mandatory dates, but on regular, honest conversations – you give us feedback, we give you. This is how we all know what we are about and can support our next development steps in a targeted manner. Health, Leisure & Security You will receive 30 days of vacation per year, which will not fail, as well as additional insurance, for example by a group accident insurance. So you are not only professional, but also privately well placed. Team culture & common experiences Despite Remote-First, personal exchange is important: we meet regularly for joint activities – sometimes loose at a get-together, sometimes at a joint workshop, sometimes actively at excursions – and thus ensure real cohesion away from the screen. .