Application Architect, Tech Lead

DACHS IT

. Responsibility for the technical direction of the managed service .

Posted 9/15/2026full-timeRemote • GermanySeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting and operating Kubernetes-based SaaS environments, with a strong focus on CI/CD integration, information security compliance, and IT service management. Proficient in managing complex deployments using Helm and Helmfile, while providing technical leadership and mentoring to engineering teams.

Highest-signal resume keywords

Kubernetes ArchitectureHelm and Helmfile ProficiencyCI/CD Integration with GitLab CIISO 27001 ComplianceITIL Process Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KubernetesHelmHelmfileGitLab CICNPGMariaDB OperatorExternalSecretsPrometheusThanosLoki

Soft Skills

Technical LeadershipAnalytical SkillsCommunication SkillsHands-On ApproachMentoring

Tools & Technologies

GitOpsOpenBaoITILCI/CDBackup/Restore

Certifications & Qualifications

ISO 27001

Industry Keywords

SaaSManaged ServicesMulti-Tenant ArchitectureIncident ManagementChange Management

Tech Stack

Tools & technologies

FluxITSMKubernetesLinuxMariaDBPostgresPrometheusVault

About the role

Key responsibilities & impact

Responsibility for the technical direction of the managed service
Design of the target and deployment architecture for multi-tenant openDesk SaaS operations across multiple Kubernetes clusters
Definition of engineering standards and documentation of technical decisions as ADRs
Conducting design and code reviews
Designing the Helmfile-based openDesk deployment with 35+ Helm charts, Helm-diff, and environments/values
Managing delivery through GitLab CI and GitOps for supporting services
Responsibility for the database concept using CNPG for PostgreSQL and the MariaDB Operator, including backup/restore and PITR
Responsibility for secret management via ExternalSecrets with OpenBao
Definition of the application-side monitoring and alerting concept using the Prometheus ecosystem, Thanos, and Loki
Responsibility for technical ISO 27001 compliance based on BSI IT-Grundschutz, including security contexts, technical controls, and evidence
Designing and technically embedding ITIL processes for incident, problem, change, and release management
Integrating CI/CD into change management
Defining interfaces with the Platform Team and making build-versus-buy decisions
Mentoring DevOps, rollout, and support engineers
Participating in the on-call rotation

Requirements

What you’ll need

Several years of experience architecting and operating complex, Kubernetes-based application environments as SaaS/managed services
In-depth knowledge of the openDesk stack or comparable collaboration components
Proficiency with Helm and Helmfile, including multi-chart deployments, Helm-diff, and values/environments
Experience with CI-driven rollouts, such as GitLab CI, and GitOps, such as Flux
Experience operating databases in Kubernetes through operators, ideally CNPG/CloudNativePG and/or MariaDB Operator, including backup/restore and PITR
Experience with secret management, ExternalSecrets, Vault/OpenBao, and application-side monitoring and alerting
Experience with IT service management based on ITIL, including incident, problem, change, and release management, as well as integrating CI/CD into ITSM processes
Technical responsibility for information security in accordance with ISO 27001, based on BSI IT-Grundschutz
Strong Linux skills
Willingness to participate in the on-call rotation
Business-level German and English (C1/C2), both written and spoken
Strong technical leadership skills without disciplinary management responsibility
Excellent analytical and conceptual skills
Strong communication skills when working with engineers, service owners, and the Platform Team
Hands-on approach
Willingness to lead by example and actively seek 360-degree feedback

Benefits

Comp & perks

Remote-first working model with the option to work from home, a shared office, or a combination of both
Flexible working hours
Exciting projects in platform development, cloud migration, automation, operations, and technical customer training
Regular training and certifications, with costs covered and time off provided
Internal knowledge sharing and professional and methodological development
Modern hardware, suitable software, and the equipment you need
Annual participation in company profits
Company car option depending on the role
Regular feedback and development discussions
30 days of annual leave
Group accident insurance
Regular team activities, get-togethers, workshops, and outings