Senior DevOps Engineer (f/m/d)

About the role

<p>&nbsp;</p> <p><strong>Mission Brief</strong></p> <p><span data-contrast="auto">As a <strong>Senior DevOps Platform Engineer</strong>, you will play a key role in building and evolving the Software Platform capabilities used across Ground Systems. You will enable engineering teams with scalable, secure, and efficient development workflows while continuously improving developer productivity and software delivery.</span><span data-ccp-props="{"201341983":0,"335551550":6,"335551620":6,"335559740":360}">&nbsp;</span></p> <p><span data-contrast="auto">Specifically, this is a hands-on platform engineering role with a strong infrastructure core. Your mission is to own the runtime that Ground Systems software runs on both the on-premise Kubernetes clusters and the cloud services around them and the developer experience of getting software onto it. You will design cluster architecture, build the automation that provisions and maintains clusters across environments, and maintain the reusable delivery platform (GitLab CI/CD library, container toolchains, Helm charts, IaC modules) that product teams consume.</span>&nbsp;<br>&nbsp;<br><strong>Your role in our Space Mission...</strong></p> <ul> <li><span data-contrast="auto"><span data-ccp-parastyle="Normal (Web)">Own and continuously evolve software platform capabilities enabling secure, reliable, and efficient software delivery</span></span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":0,"335551550":1,"335551620":1,"335559740":360}">&nbsp;</span></li> <li><span data-contrast="auto">Design and evolve the architecture of on-premise and cloud-hosted Kubernetes clusters and the surrounding platform: control-plane/worker topology, networking, storage, secrets management, and multi-environment promotion models.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">&nbsp;</span></li> <li><span data-contrast="auto">Make and document architecture decisions as ADRs and standards that other teams build against, balancing reliability, operability, cost, and delivery speed.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">&nbsp;</span></li> <li><span data-contrast="auto">Build and maintain automation that initialize, upgrades, and recovers clusters end to end as well as certificate lifecycle, node drains and upgrades, storage provisioning and incident management.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">&nbsp;</span></li> <li><span data-contrast="auto">Provision the on-premise and cloud-hosted substrate with Terraform and configure it with Ansible: HAProxy load balancers, NFS shares, DNS/resolv, secondary disks, domain joins.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">&nbsp;</span></li> <li><span data-contrast="auto">Manage workloads with Helm: author, version, and maintain charts for application services and stateful components (Kafka, ClickHouse, MQTT brokers, MSSQL), with automated semVer releases driven from merge requests.</span></li> <li><span data-contrast="auto">Practice GitOps with ArgoCD: installation, Azure Entra ID SSO and RBAC, and reconciliation troubleshooting across clusters.</span></li> <li><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">Own shared GitLab CI/CD library for jobs, templates, rules, semVer/release/changelog automation</span></li> <li><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":6,"335551620":6,"335559738":0,"335559739":0,"335559740":360}">Operate developer-facing platform tooling and the conta

Skills