Cloud Engineer/Kubernetes Platform Security

Responsibilities

• Drive the development and implementation of security-relevant features for the STACKIT Kubernetes Engine (SKE)
• Develop comprehensive security policies for Kubernetes clusters, including RBAC, Admission Controllers, and Network Policies
• Implement Policy-as-Code solutions such as Kyverno
• Deploy security measures including Pod Security Standards, Image Scanning, Audit Logging, and Runtime Security Monitoring with Falco
• Act as a technical interface to the Cyber Security Team to implement security requirements
• Automate processes to ensure security compliance, including regular audits and vulnerability scans

Requirements

• A "You Build It - You Run It!" mindset with a strong sense of operational responsibility
• Several years of experience in operating Linux servers and Kubernetes clusters
• Proven experience in software development, ideally using Go
• Experience developing Kubernetes Operators
• Deep understanding of authentication (OIDC, SAML) and authorization (RBAC, ReBAC) protocols
• Expertise in hardening within Kubernetes and Linux environments (AppArmor, SELinux, Seccomp, eBPF)

About the Company

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. We operate as an independent provider in the external market, bundling core services in Cloud, Cyber Security, Data & AI, Communication, and Workspace.