Cloud Platform Engineer

Schwarz Corporate Solutions
Barcelona, Spain
20 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, German
Job source

Tech stack

Cloud Computing Security Computer Networks Disaster Recovery Github PostgreSQL OAuth OpenID Performance Tuning Role-Based Access Control Prometheus Management of Software Versions SSL Certificate Management
+9 more
Cloud Platform System Okta Grafana Technical Debt Backend Git Kubernetes Infrastructure Automation Frameworks Vulnerability Analysis

Job description

Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group., * You own the design, maintenance, and continuous improvement of our Kubernetes infrastructure, including upgrades, resource planning, and cluster health across all environments (DEV, TEST, QA, PRE-PROD, PROD).

  • You manage and extend our Helm chart library and ArgoCD App-of-Apps GitOps pipelines, ensuring all deployments are declarative, reproducible, and auditable.
  • You operate and improve our CloudNativePG-based PostgreSQL fleet including backup strategies, failover testing, and schema migration workflows.
  • You drive Infrastructure as Code practices across the team: defining, versioning, and reviewing all infrastructure changes through Git, with no manual snowflakes.
  • You own our observability stack (Prometheus, Grafana, etc.) building dashboards, tuning alert rules, and ensuring on-call teams have actionable signals.
  • You strengthen platform security: managing TLS certificates via cert-manager, configuring Keycloak integrations, and hardening the mTLS setup used for federated hospital connectivity.
  • You collaborate closely with backend engineers to define container build standards, optimize CI/CD pipelines (GitHub Actions), and integrate security scanning into the delivery workflow.
  • You work with our infrastructure provider STACKIT to plan capacity, coordinate Kubernetes upgrades, and maintain disaster recovery procedures.

Requirements

  • You have hands-on experience running production Kubernetes clusters: upgrades, multi-namespace management, RBAC, resource quotas, and real incidents.
  • You are fluent in Helm and GitOps tooling (ArgoCD or Flux); you write charts from scratch, not just deploy them.
  • You are comfortable with PostgreSQL operations: replication, backup/restore, connection pooling, and performance tuning under load.
  • You have experience with Infrastructure as Code and treat every manual click as technical debt.
  • You know your way around an observability stack, writing PromQL, building Grafana dashboards, and designing alert thresholds that fire when it matters.
  • Ideally, you have experience with cloud-native security concepts: mTLS, OAuth2/OIDC, certificate management, and network policies.
  • Ideally, you have worked in a regulated or compliance-sensitive environment (healthcare, finance, government) where auditability and data protection are non-negotiable.
  • You communicate clearly in English; German is a plus but not required.
  • You are curious, self-directed, and energized by hard problems, you don’t wait to be told what’s broken.

About the company

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on es.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:14 min

Solving complex platform architecture challenges at an enterprise scale

Maria Apazoglou · Coffee With Developers

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

6:21 min

Investigating push inefficiencies with upstream Git experts

Jonathan Creamer · Coffee With Developers

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

4:37 min

Architecting single sign-on flows across multiple application domains

Gift Egwuenu · WWC 2023

Videos

See all

Related articles

See all