Application DevSecOps Engineer

📋 Job Overview

At DACHS IT, we offer more than just a job – we provide an environment that fits your life, strengths, and goals. We are looking for a DevOps Engineer to maintain our openDesk-Managed-Service, handling deployment, updates, monitoring, and troubleshooting. You'll work with Kubernetes, Helmfile, Helm-Diff, and GitLab CI to ensure smooth operations.

🏢 About DACHS IT

DACHS IT is a company that values remote work, flexibility, and continuous learning. We believe in creating a supportive and innovative environment where employees can thrive and grow.

🎯 The Role

As an openDesk DevOps Engineer, you will be responsible for the technical operation of our Managed Service. This includes deploying and updating openDesk components, managing databases, monitoring applications, and automating operations. You will work with a variety of technologies and tools to ensure our services run smoothly.

✅ Key Responsibilities

• Deploy and update openDesk components via Helmfile/Helm-Diff over GitLab CI, including release and patch management.
• Manage databases using operators like CNPG for PostgreSQL and MariaDB-Operator, handling backup, restore, and upgrades.
• Manage application secrets via ExternalSecrets against OpenBao.
• Monitor applications using tools like kube-prometheus-stack, Thanos, and Loki.
• Operate supporting services like Redis/Memcached, Object Storage, Mail infrastructure, ClamAV/ICAP, and Coturn.
• Debug and troubleshoot issues across openDesk components and Kubernetes.
• Automate operations and collaborate with the Platform team.
• Participate in the 24x7 on-call rotation for the service.

📌 Required Qualifications

• Strong experience with Kubernetes in operations, including workloads, networking, RBAC, storage, and troubleshooting.
• Experience with Helm, and willingness to use Helmfile and Helm-Diff.
• Practical experience with CI-driven rollout (e.g., GitLab CI) or GitOps (Flux).
• Experience with database operations (PostgreSQL/MariaDB), preferably using operators like CNPG or MariaDB-Operator.
• Experience with monitoring and observability tools like Prometheus and Grafana, and alerting.
• Strong Linux skills and an automation mindset (e.g., Ansible, scripting).
• Willingness to be on-call for a 24x7 service (no shift work).
• Fluent in German and English (C1/C2) in speech and writing.

⭐ Desirable Experience

• Experience with openDesk components like Nubus/Keycloak, OX App Suite, Nextcloud, Collabora, Jitsi, Element/Synapse, OpenProject, and XWiki.
• Experience with secret management via ExternalSecrets and Vault/OpenBao.
• Experience with supporting services like Redis/Memcached, Object Storage, Mail infrastructure, ClamAV/ICAP, and Coturn.
• Experience with multi-cluster, multi-tenant operations.
• Relevant certifications (e.g., CKA/CKS).

🎁 Benefits

Remote-First Culture
We work remotely and offer flexible working hours. You can choose where you work most productively – home office, shared office, or a mix.

Flexible Working Hours
You can flexibly schedule your work around projects. Reliability in the team and transparent communication are more important than desk presence.

Exciting Projects
We find projects that match your profile and development goals – e.g., platform building, cloud migration, automation, operations, or technical training at clients.

Training, Certifications & Knowledge Sharing
Regular training and certifications are planned with cost coverage and time off. We also offer internal knowledge sharing, peer-to-peer sparring, and opportunities for professional development.

Modern Equipment & Environment
You receive modern hardware, software, and equipment for efficient and comfortable work.

Attractive Conditions
In addition to a fair base salary, you receive an annual profit-sharing bonus. Depending on the role, a company car may also be available.

Transparent Feedback Culture & Development
We focus on regular, honest conversations rather than annual reviews. You provide feedback, and we provide it to you. This helps us all understand where we stand and support our development.

Health, Leisure & Security
You receive 30 days of vacation per year, which do not expire, and additional security, such as group accident insurance. This ensures you are well-supported both professionally and personally.

Team Culture & Shared Experiences
Despite our remote-first approach, we value personal exchange. We regularly meet for joint activities – casual get-togethers, workshops, or outings – to foster real teamwork beyond the screen.

🛂 Visa & Eligibility

No specific visa or work eligibility information was provided in the job description.