Context: The infrastructure is centrally managed and strictly separated from the application layer. We follow a "Shared Infrastructure" approach with multiple environment stages (Dev, QA, Prod) to reduce operational overhead. This infrastructure supports various applications developed by the product teams, including the SLM platform, the Support API, and the Assume Role application for C5-compliant customer data access.

The Impact You Will Create

• Infrastructure as Code (IaC): Provision and manage all STACKIT cloud resources and Kubernetes configurations using Terraform, Terragrunt, and Ansible.


• GitOps Management: Implement and maintain declarative deployments (e.g., ArgoCD / FluxCD) to ensure the live state of the cluster always matches the Git code repository.


• Observability & Monitoring: Manage the central observability stack in the infrastructure project. This includes maintaining Grafana, Thanos, Loki, and Grafana Alloy (Metrics Exporter) for cross-team monitoring of logs, metrics, and traces.


• Network & Security: Configure and manage the STACKIT Network Area (SNA) using private endpoints and security groups. Manage Ingress Controllers (Layer 7 routing), Service Mesh for internal encryption, and external access via the pfSense Wireguard VPN.


• Secret and Lifecycle Management: Manage the Secret Store (aaS) and the External Secrets Operator for infrastructure and application secrets.

Experience and Skills You will Need

• Deep experience in building cloud infrastructures using Terraform and ideally Ansible.


• Strong expertise in Kubernetes (SKE) administration and operating infrastructure add-ons according to the "Infrastructure Layering" model.


• Practical experience with GitOps tools (e.g., ArgoCD or FluxCD) and CI/CD pipelines (GitLab/Forgejo).


• Confident handling of modern observability plaforms (Prometheus ecosystem, Grafana, Loki, Thanos).


• Understanding of complex cloud network architectures, VPNs (Wireguard), and private IP routing (RFC 1918).