Devops Platform Engineer CI/CD

• Own and shape the central service - our new, managed GitLab instance that serves as the primary source-code and CI/CD platform for all new development at Müller.
• Build the foundation for our everything-as-code approach on Google Cloud Platform: everything we run - infrastructure, policies, pipelines, and applications - flows through GitLab into production.
• Design and deliver CI/CD building blocks that make life easier for developers: managed, pre-configured pipeline templates (golden paths) covering build, test, scan, sign, and deploy - so application teams ship software instead of maintaining YAML.
• Architect our secure software development lifecycle: establish SAST, DAST, dependency and container scanning, SBOM, secret detection, and image signing as standard, automated stages of every pipeline - and evolve the toolchain as our DevSecOps maturity grows.
• Shape key follow-up architecture decisions, including runner topology on GKE, secure CI-to-GCP authentication, and cost-efficient build patterns.
• Evaluate and integrate AI-assisted features in our toolchain where they create real value for developers - pragmatically and with sound governance.
• Champion the cultural shift from strict Dev/Ops separation toward DevOps teams with end-to-end ownership - supported by a strong platform, clear interfaces, and your pipelines.
• Collaborate closely with the hybrid platform team in Bucharest and Ulm, and contribute to technical standards, code-review culture, and architecture decision records.

• Several years of hands-on experience as a Platform, DevOps, or CI/CD Engineer building and running CI/CD at scale - we welcome both seasoned experts and strong engineers ready to grow into full service ownership.
• Deep, practical GitLab expertise - pipeline design, runners, container registry, merge-request workflows, and administration of a GitLab instance as a product for developers.
• A DevSecOps mindset and secure software development lifecycle (SSDLC) know-how: hands-on experience with SAST, DAST, dependency and container scanning, secret detection, SBOM generation, image signing, and policy enforcement - ideally embedded directly into CI pipelines (shift-left).
• An everything-as-code working style - you treat pipelines, runners, and infrastructure as versioned, reviewable code (Terraform experience is a strong plus).
• Solid command of the cloud-native delivery toolchain: containers, Kubernetes (GKE preferred), artifact management, Helm, and secure authentication patterns from CI to cloud (e.g. OIDC / workload identity federation instead of long-lived keys).
• A pragmatic Platform-as-a-Product mindset - you prefer paved roads over one-off heroics, treat developers as customers, and measure success by their flow, not by the size of your toolbox.
• Curiosity for emerging AI-assisted capabilities in the software delivery toolchain and a healthy judgment about where they genuinely help developers.
• Clear communication across engineering, security, and external partners - you can explain a pipeline architecture to a developer and its risk posture to a security reviewer on the same day.
• Fluent English required; German or Romanian is a plus.

• A green-field opportunity on a brand-new GCP DevOps Platform - your pipeline templates, security gates, and standards will define how application engineers at Müller ship software for years to come.
• A modern IT organisation with over 230 colleagues, flat hierarchies, and real freedom to shape your domain.
• Two locations, one team - work from Bucharest or Ulm with a flexible hybrid model (desk sharing and mobile working) and regular in-person meetups across both locations.
• Great teams that enjoy driving Müller’s digitalisation forward every day.

We are building a new GCP-based DevOps Platform for one of Europe’s largest family-owned retailers - and our new managed GitLab is directly at the core. As DevOps Platform Engineer CI/CD, you become the owner and designer of this world: from everything-as-code foundations and golden-path pipelines to a secure software development lifecycle with security built in from the first commit. Whether you are a seasoned expert or a strong engineer ready to take real ownership - if CI/CD and DevSecOps are your passion, this is your platform to shape.