Application Architect, Tech Lead

This is a fully remote position, open to applicants in Germany.

📋 Description

• Overseeing the technical strategy of the managed service.

• Designing the target and deployment architecture for multi-tenant openDesk SaaS operations across various Kubernetes clusters.

• Establishing engineering standards and documenting technical decisions as Architectural Decision Records (ADRs).

• Performing design and code reviews.

• Creating the Helmfile-based deployment for openDesk, utilizing 35+ Helm charts, Helm-diff, and various environments/values.

• Managing delivery through GitLab CI and GitOps to support services.

• Responsible for the database architecture using CNPG for PostgreSQL and the MariaDB Operator, including backup/restore and Point-in-Time Recovery (PITR).

• Overseeing secret management via ExternalSecrets with OpenBao.

• Defining the monitoring and alerting strategy for applications using the Prometheus ecosystem, Thanos, and Loki.

• Ensuring technical compliance with ISO 27001 based on BSI IT-Grundschutz, incorporating security contexts, technical controls, and evidence.

• Designing and integrating ITIL processes for incident, problem, change, and release management.

• Incorporating CI/CD into change management processes.

• Defining interfaces with the Platform Team and making decisions on build versus buy.

• Mentoring DevOps, rollout, and support engineers.

• Participating in the on-call rotation.

⛳️ Requirements

• Multiple years of experience in architecting and managing complex, Kubernetes-based application environments as SaaS or managed services.

• Extensive knowledge of the openDesk stack or similar collaboration components.

• Expertise with Helm and Helmfile, including multi-chart deployments, Helm-diff, and values/environments.

• Experience with CI-driven rollouts, such as GitLab CI, and GitOps methodologies like Flux.

• Familiarity with operating databases in Kubernetes through operators, preferably CNPG/CloudNativePG and/or MariaDB Operator, including backup/restore and PITR processes.

• Knowledge of secret management, including ExternalSecrets, Vault/OpenBao, and monitoring and alerting on the application side.

• Experience with IT service management based on ITIL, including incident, problem, change, and release management, as well as integrating CI/CD into ITSM practices.

• Technical accountability for information security in alignment with ISO 27001, based on BSI IT-Grundschutz.

• Strong Linux expertise.

• Willingness to participate in the on-call rotation.

• Proficient in both German and English at a business level (C1/C2), both written and spoken.

• Strong technical leadership abilities without disciplinary management responsibilities.

• Excellent analytical and conceptual thinking skills.

• Strong communication aptitude when collaborating with engineers, service owners, and the Platform Team.

• Hands-on approach to problem-solving.

• Willingness to lead by example and actively seek comprehensive feedback.

🏝️ Benefits

• Remote-first working model with the flexibility to work from home, a shared office, or a combination of both.

• Flexible working hours.

• Engaging projects in platform development, cloud migration, automation, operations, and technical customer training.

• Regular training and certification opportunities, with costs covered and time off provided for participation.

• Internal knowledge sharing and opportunities for professional and methodological growth.

• Access to modern hardware, appropriate software, and necessary equipment.

• Annual profit-sharing participation.

• Option for a company car depending on the role.

• Regular feedback and development discussions.

• 30 days of annual leave.

• Group accident insurance.

• Frequent team activities, gatherings, workshops, and outings.