Application DevSecOps Engineer

DACHS IT

. Take responsibility for the technical operation of the openDesk managed service .

Posted 9/15/2026full-timeRemote • GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Kubernetes operations, including deployment and troubleshooting, alongside strong skills in CI/CD practices using GitLab CI and Helm. Proficient in database management, monitoring, and automation, with a focus on operational reliability in a 24/7 service environment.

Highest-signal resume keywords

Kubernetes OperationsGitLab CIHelmfilePostgreSQLMonitoring/Observability

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KubernetesHelmGitOpsPostgreSQLMariaDBPrometheusGrafanaAnsibleScriptingExternalSecrets

Soft Skills

Problem-SolvingCommunicationTeamworkSelf-OrganizationAgile Mindset

Tools & Technologies

Helm-DiffCNPGMariaDB OperatorRedisMemcachedClamAVICAPCoturnObject StorageMail Infrastructure

Certifications & Qualifications

CKACKS

Industry Keywords

Managed ServiceSaaS24/7 OperationsOperational OwnershipSecurity by Design

Tech Stack

Tools & technologies

AnsibleFluxGrafanaKubernetesLinuxMariaDBPostgresPrometheusRedisVault

About the role

Key responsibilities & impact

Take responsibility for the technical operation of the openDesk managed service
Deploy and update openDesk components via Helmfile/Helm-Diff using GitLab CI
Manage releases and patches
Deploy supporting services via GitOps wherever possible
Operate databases using CNPG and the MariaDB Operator, including backup/restore, point-in-time recovery, and upgrades
Manage application-specific secrets via ExternalSecrets connected to OpenBao
Monitor the application with application-specific metrics and alerting rules, and contribute to defining SLIs/SLOs
Operate supporting services such as Redis/Memcached, object storage, mail infrastructure, ClamAV/ICAP, and Coturn
Troubleshoot and debug openDesk components and the Kubernetes layer
Document runbooks
Automate operational and deployment tasks
Work at the interface with the Platform team
Participate with the team in the on-call rotation for 24/7 operations

Requirements

What you’ll need

Proficient in operating Kubernetes, including workloads, networking, RBAC, storage, and troubleshooting
Experience with Helm; willingness to work with, and ideally experience in, Helmfile and Helm-Diff
Practical experience with CI-driven rollouts, such as GitLab CI, and/or GitOps, such as Flux
Experience operating databases (PostgreSQL/MariaDB), ideally using CNPG/CloudNativePG or the MariaDB Operator
Experience with monitoring/observability (Prometheus/Grafana ecosystem) and alerting
Strong Linux skills and an automation mindset, such as Ansible and scripting
Willingness to participate in on-call support for the 24/7 service; no shift work
Business-level German and English (C1/C2), both written and spoken
Empirical, agile mindset and strong problem-solving skills
Operational ownership and reliability in a 24/7 context
Strong communication skills, ability to work in a team, and ability to self-organize
Security awareness (security by design, least privilege)
Willingness to give and receive 360-degree feedback
Nice to have: Experience with openDesk components
Nice to have: Experience with ExternalSecrets and Vault/OpenBao
Nice to have: Experience with Redis/Memcached, object storage, mail infrastructure, ClamAV/ICAP, and Coturn
Nice to have: Experience operating multi-tenant environments across multiple clusters
Nice to have: Certifications such as CKA/CKS
Nice to have: Experience in IT operations for a managed service or SaaS environment
Nice to have: Willingness to share knowledge within the team

Benefits

Comp & perks

Remote-first work with the option to work from home, a shared office, or a combination of both
Flexible working hours with personal responsibility
Exciting projects and the opportunity to choose projects individually
Training and certification costs covered, including time off for training
Internal knowledge sharing and professional/methodological development
Modern hardware, suitable software, and all necessary equipment
Annual share in the company’s profits
Company car option, depending on the role
30 days of annual leave, which do not expire
Group accident insurance
Regular team activities, get-togethers, workshops, and outings
Regular feedback and development discussions