Senior Platform Engineer (m/f/d)

You shape the Pradtke Cloud: architecture, operating model, security concept. You decide how our client model scales when ten customers become a hundred, what we do ourselves and what we leave STACKIT or the cloudpunks. And you document these decisions so that You are still comprehensible in two years.

For safe operation: Policies in Kyverno, Runtime-Security with Falco, Scans with Trivy, Secrets about External Secrets and STACKIT Secrets Manager, Identity about Keycloak with Realm per Mandant. You keep this together, close gaps, take care of curing, patching, backup and recovery – and you suggest that it works. Our customers are clinics and fire brigades; their requirements for information security and data protection are your bar.

You put on your own hand: Terraform, Flux, Kustomize, Helm, Envoy Gateway, cert-manager. You bring changes cleanly from Test to Prod, keeps Renovate updates and operator versions under control, automate what is repeated – and provide the basis for our development teams to roll out their software independently and safely.

You make the Pradtke Cloud available reliably: Alerting rules and dashboards in the Grafana stack, Blackbox checks, Incident and Change processes, Postmortems, Operations Manual. You change your reputation and build the rotation so that colleagues can carry it.

You involve others: You enable colleagues from development and customer teams to perform tasks in operation – with runbooks, trainings and tools that work without you.

You work with our partners at eye level: You control collaboration with the Cloudpunks, get their knowledge into the house and represent our requirements towards STACKIT.

You develop the platform: cost and capacity in mind, new customers and loads in the plan, new STACKIT services in the test. You see what TIMEOFFICE Air needs tomorrow – and build it in time.

In short, you make a running operation from a finished infrastructure – and unfold with us a sovereign grain.

THE PRADTKE CLOUD So that you know what you want: Cloud & IaC: STACKIT with separate test and production environments. Terraform (Provider stackit, vault, kubernetes), State im STACKIT Object Storage. Managing: STACKIT Kubernetes Engine, PostgreSQL Flex, Object Storage, Secrets Manager.

Kubernetes & GitOps: Flux CD via the Flux operator with image automation, updates via Renovate. A namespace per customer via Kustomize overlays. Operators for STACKIT, Keycloak, RabbitMQ and Dragonfly.

Network & Identity: Envoy Gateway (Gateway API), external-dns, cert-manager with Let's Encrypt, NetworkPolicies. Keycloak with Realm per Mandant, Entra-ID connection, oauth2-proxy.

Security: Kyverno, Falco, Trivy Operator, External Secrets Operator. In the pipeline: Semgrep, TruffleHog, SBOM (cycloneDX/Syft), Grype.

Observability: OpenTelemetry, Grafana, Mimir, Loki, Tempo, Pyroscope, Blackbox Exporter.

Application & Delivery: .NET 9 and Vue 3, built with GitHub action on self-hosted runners, images in GHCR, rolled out by Flux.

At least four years of experience in the operation of productive Kubernetes platforms – and you have a clear idea of what it means to build such an operation. This role is therefore nothing for entering the profession.

Deep practice in Kubernetes and GitOps – ideally with Flux, Kustomize and Helmet; when you come from the Argo CD world, you will find yourself right. Terraform with everything that belongs to it: modules, state, linging, reviews.

You know Ingress, DNS and TLS in Kubernetes not only from the tutorial: Gateway API, cert-manager, external-dns, NetworkPolicies – and you know what happens if one of them does not run.

Security is not an annoying work package for you, but basic attitude: policy-as-code, runtime security, image and cluster scans, secrets management, OIDC and identity provider like Keycloak. Experience with ISO 27001, BSI C5 or KRITIS requirements is a plus.

Observability is for you craft: You build with OpenTelemetry and Grafana stack Alerting, which only rings at night when it has to – and dashboards that answer the right question in the morning.

You've operated state-owned services in and next to Kubernetes – databases, message brokers, caches – and you know what backup, recovery and upgrades really mean there.

You can design: write an operating concept, justify an architectural decision, evaluate a risk – and write it down in such a way that a management understands it and an auditor accepts it.

You like to pass on knowledge: You are patiently explaining, documenting so that others can act on it, and you are happy when colleagues take on things that previously only you could.

You work with service providers at eye level: demand, check, get better together. And you keep a position even if the management is of different opinion – especially in security issues – and let you convince yourself of better arguments.

Own-responsible, structured way of working – and the desire to work in a self-organized team without classical hierarchies.

German at least at level C1 – our customers, our documentation and our audits are German. A study of computer science or comparable is good; detectable practice counts even more for us.

Structure instead of administration: You determine how a market leader operates its cloud – with a new software generation in the market and customers who depend on reliability.

A setup that says: The Pradtke Cloud is built, the cloudpunks remain on board as a partner, STACKIT is directly accessible. You don't start at zero, but you start. TIMEOFFICE continues to operate on site with customers; Your focus is clearly the cloud.

A direct wire to the management: short paths, quick decisions, real participation in strategic issues – including budget and tools.

Reliability in change – clearly regulated, remunerated and with the aim that it lies on several shoulders.

Sensual work: Our software moves the working day of more than 300,000 people in health and rescue. When your platform is running, the personnel use runs in clinics and fire brigades.

An organization that focuses on self-responsibility and team autonomy – and in which you as a co-contractor: are involved in the success of the company.

A full-time job with an indefinite contract, flexible working hours and numerous benefits – from company pensions to corporate fitness to the service bike program. This includes time and budget for training and certification.

An excellent office: Our Pradtke HQ in Bochum was awarded by Callwey Verlag as one of the Best Workspaces 2026. We are usually on site at least three days a week, in between you work flexibly.

But above all: a collegial coexistence that you feel daily.

.