DevSecOps Engineer Kubernetes and AI Platform Security, fixed-term contract for 2 years (m/f/d)

DevSecOps Engineer Kubernetes and AI-Platform-Security (m/w/d) limited to two years Augsburg Bayreuth Cologne Country hat Munich Nuremberg Regensburg Villingen-Schwenningen Würzburg We make Germany's administration digital. Designing software solutions for digital and modern administration, which organize the involvement of citizens: in cities and communities – across Bavaria and Germany. What do you expect from the AKDB? In the field of AI & Cloud, we develop scalable, secure and sovereign AI solutions for public administration. Our aim is to make generic AI productive, responsive and economical. We combine modern cloud architectures with high data protection, stability and sustainability.

You are responsible for the technical safety of our AI platform based on Kubernetes and STACKIT. You perform Threat modeling and risk analysis for new AI applications. You accompany roll-outs with security reviews and clear technical recommendations. You cure Kubernetes environments, such as RBAC, Network Policies, Pod Security Standards, Admission Control and Policy as Code. You work with existing policy-as-code approaches, especially Kyverno. You save the software supply chain, for example with signed container images, SBOMs, vulnerability scans, Trivy and Image Hardening. You enter and automate Secrets Management with Vault including identities, tokens and certificate life cycles. You develop security monitoring, for example with audit logs, security metrics, prometheus, Grafana, Loki and Alert Manager. You support vulnerability management and security incidents in the platform context. You translate requirements from basic BSI protection, ISO 27001 and GDPR into specific technical measures. You are advising DevOps and development teams to make sure that every day is safe.

Multiannual experience in cloud, platform or IT security Very good understanding of Kubernetes Security, especially RBAC, Network Policies, Pod Security Standards, Admission Control and Policy as Code Experience with container and supply chain security, such as Trivy, CVE Management, Image Hardening, Signed Images or SBOMs Practice in dealing with Secrets Management, ideally with Vault Experience with Threat Modeling, Risk Analysis or Security Incident Response Good understanding of Kubernetes, Terraform, Helmet and GitOps Experience with monitoring and logging solutions such as Prometheus, Grafana, Loki and Alertmanager Knowledge in the areas of basic BSI protection, ISO 27001 and GDPR Experience with C5, KRITIS or NIS2 is a plus, but no need Pragmatic Security Thinking: You want to unnecessarily complicate security, not processes Good knowledge of German (at least C1 level) so that you can safely vote with internal teams, partners and departments

Culture and cooperation Close, value-adjusted management and business culture, which supports innovative and self-explanatory work Motivated team and exciting, challenging tasks Security and remuneration Safe workplace with attractive salary and generally permanent contracts Flexibility and work-life balance Flexible working hours: sliding time and up to 60% mobile work 30 days plus three paid free days per year Workation: up to 30 days in the European Economic Area (including Iceland, Liechtenstein, Norway and Switzerland) – with team agreement Development and perspectives Vocational training, targeted training and talent management for personal support Working environment and infrastructure Modern, centrally located offices with roof terrace, underground garage and pleasant working environment Additional services and goodies Corporate Benefits, e.g. a discounted Germany ticket, child care and changing employee events