75% Remote: Lead Architect (f/m/d) DevOps Enablement

For our client we are looking for a Lead Architect (f/m/d).

Frame data:
Start: November 2024
Duration: 31.03.25 ++ (long term)
Capacity: 100% if possible
Location: Berlin / Remote (1 week Berlin / 3 weeks remote in rotation), up to 50% onsite in peak times

Role:
The DevOps Enablement (DOE) product line streamlines developer workflows on the platform by reducing overhead and automating tasks, allowing developers to focus on business logic. DOE provides tools across five key product clusters: the Collaboration Suite (Jira, Confluence), CodeBuild (CI for automation and source management), Deployment (CD with Kubernetes and ArgoCD), Security & Compliance (AquaSec, Sonar), and the DevOps Portal, which serves as a self-service hub base on Backstage.io for interacting with all
DOE products and platform services. Each area is represented by an own Squad within DOE.

The Architecture Lead for DOE is responsible for translating the Product Lead’s vision into practical technical solutions, focusing on "how" to implement the "what" defined by the Product Lead. This role involves collaborating with the Product Line Lead, platform architects, and other Architecture Leads to ensure
platform-wide alignment. Additionally, the Architecture Lead engages with the DOE Product Lead, Delivery Lead, Operations Lead, and the Squad Leads across the five key clusters.

Targets:
• Develop and drive the DOE strategy and its implementation for on-prem, private, and public cloud solutions.
• Design scalable, cloud-native solutions to streamline developer workflows within the platform.
• Design and manage lifecycle of platform services.

Skills (must-have):
• At least five years of experience architecting DevOps solutions within AWS, GCP, MS Azure, and other cloud providers, as well as on-premise providing a hybrid cloud user experience
• Experience in modular, distributed, highly availalbe software architecture
• Advanced understanding of Service Oriented Architecture and Microservices
• Advanced understanding of Kubernetes (Yaml and HelmCharts) and Docker concepts
• Advanced understanding of Infrastucture-as-Code (Terraform, Pulumi or Ansible) and GitOps concepts
• Advanced understanding of IAM, OAuth and OIDC
• Advanced understanding of DevSecOps (like AquaSec or Sonar)
• Advanced understanding of Continous Integration (Source Code Management, Application Lifecycle Management and Pipelines) concepts
• Advanced understanding of Continous Delivery and GitOps (ArgoCD, Flux or Flamingo) concepts
• Advanced understanding of Image Registries (like Gitlab Registry and Harbor) and Artifact Repository Management (like Artifactory)
• Advanced understanding of Collaboration Tools like Atlassian Jira und Confluence
• Advanced understanding of DevOps Portal (like Backstage.io)
• Advanced understanding of agile Software Development (Scrum and Kanban)
• Advanced understanding of Programming (Java, Go, C#, JavaScript, GO, Typescript, etc.) and Scripting
Languages (Python, Shell scripting, etc.)
• Advanced understanding of Observability practices incl. Logging and Monitoring (Prometheus, Loki or
Grafana)
• Quick understanding of complex requirements and high abstraction abilities
• Adequate understanding of secure enterprise architecture
• Experience in writing documentation of complex environments
• Developer Experience: Optimize the development lifecycle by that maximize developer efficiency and
satisfaction.
• Customer-Centric: ability to reflect and prioritize customer feedback and enhance user experience
• Ownership: Taking ownership for end-to-end solutions
• Strong Analytical Skills: ability to analyze data and make informed decisions
• Team player skills: cross team collaboration
• Fluent English in speech and writing (at least B2).
• Fluent German in speech and writing (at least B2).

Skills (should-have):
• Understanding of KRITIS or NIS2 requirements
• Understanding of API design, development and migration
• Experience with test-, behavior-, observability-driven development
• Experience with designing RBAC and other access control methodologies
• Experience in Secret Management (like HashiCorp Vault)
• Experience in Public Key Infrastruktur (PKI) and Certificate Authority (CA)
• Experience in cloud networking, DNS, and firewall concepts
• Experience with ITIL and IT Operations
• Experience with Zero Trust environments