Platform operation & development (Terraform/OpenTofu): standardization and modularization, drift handling, secure defaults, cost guardrails
EKS platform maintenance: cluster and add-on upgrades, secure configurations, capacity/performance management, runbooks and operational processes
Deployments to EKS (Helm/Helmfile): environment-specific overlays, templates, release strategies (e.g. Rolling/Blue-Green where appropriate), secret handling
Observability & alerting: SLI/SLO definition, dashboards, alerting (Prometheus/Grafana/Alertmanager or CloudWatch), reducing alarm fatigue, on-call hygiene
ISO 27001 readiness: mapping controls to infra and organization, hardening, access reviews, backup/DR testing, change-management automation, auditable evidence
Identity & device administration: Windows AD / Entra ID (Conditional Access, privileged access workflows), policies (GPO/MDM/Intune if in scope), endpoint standards
Enablement: improve developer experience (self-service, templates, documentation), define pragmatic standards together with the team

Requirements

Experience in Cloud/Platform/DevOps (AWS) and a preference for “run & improve” ways of working
Strong IaC practice (Terraform/OpenTofu) with well-structured standards and modules
Confident in EKS/Kubernetes operations and deployments (Helm/Helmfile)
Treat observability as an operational capability (SLOs, meaningful alerts, runbooks)
Pragmatic approach to security and compliance (least privilege, reviews, auditability, backups/DR)
Structured communicator who takes ownership and documents work
Important: You do not have to meet every point “perfectly.” If you cover the core areas and are eager to grow, we welcome your application — including if you expect to develop further in some topics.
Nice to have: GitLab CI/CD (or equivalent), Ansible, Policy-as-Code
Nice to have: Experience with ISO 27001 (implementation, evidence, audits)
Nice to have: Experience with Windows/Entra ID, Conditional Access, Intune/MDM

Benefits

Freedom to shape the platform and strong ownership (Platform as a Product) — with a stable base you can improve
Short communication lines, pragmatic decisions, direct impact
A collegial team with flat hierarchies
Permanent employment contract
Flexible working models (remote/hybrid by arrangement); part-time possible by arrangement
Professional development (training, certifications as needed) and dedicated time for cleanup and improvements
Team activities (e.g. group BBQs, shared lunchtime cooking, annual team day)
Free coffee/hot drinks and fruit; cake provided regularly
An environment where diverse perspectives are explicitly welcome — we especially encourage applications from women and underrepresented groups

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

TerraformOpenTofuEKSKubernetesHelmHelmfilePrometheusGrafanaAlertmanagerISO 27001

Soft Skills

structured communicationownershippragmatic approachdeveloper experience improvement