About this role
<p>We’re looking for an experienced DevOps Engineer with an automation-first mindset — someone who builds repeatable delivery through CI/CD, GitOps, and Infrastructure as Code, and keeps production environments stable, secure, and observable.</p> <p>You’ll join a team in Bulgaria that operates and evolves Kubernetes-based internal platforms and cloud-native environments for teams in Germany.</p> <p> </p> <p><strong>Who we are</strong></p> <p>msg global solutions is part of the msg group. We work on internal cloud-native platforms and operational practices with a pragmatic, production-first mindset and short decision paths.</p> <p> </p> <p><strong>What you’ll do</strong></p> <ul> <li>Operate and evolve Kubernetes environments and deployment approaches using Helm and Kustomize.</li> <li>Work with AWS as the runtime platform, including EKS and security practices.</li> <li>Maintain and integrate key AWS services according to platform needs: S3, EFS, RDS.</li> <li>Build and improve CI/CD automation, preferably in Azure DevOps, so releases are repeatable and predictable.</li> <li>Introduce and maintain GitOps processes with Argo CD for consistent and traceable deployments.</li> <li>Maintain Infrastructure as Code with Terraform for reproducible environments and controlled changes.</li> <li>Collaborate with development teams to understand application architecture and ensure seamless integration of CI/CD pipelines and infrastructure solutions.</li> <li>Contribute to the optimization of application performance and reliability through code-level insights and infrastructure improvements.</li> <li>Apply Crossplane as an IaC/platform provisioning approach when the goal is standardization and infrastructure self-service.</li> <li>Strengthen platform security with network security concepts (controls, segmentation, rules, policies) and secure operations across environments.</li> <li>Implement and enforce Kubernetes security and governance policies using Kyverno (policy-as-code, admission control, compliance guardrails).</li> <li>Operate and evolve the service mesh layer with Istio (traffic management, mTLS, policy enforcement, and observability signals where applicable).</li> <li>Maintain identity: Keycloak as an Identity Provider and identity federation concepts (integrations, trust, identity flows).</li> <li>Ensure visibility and operational readiness through monitoring in Grafana.</li> </ul> <p> </p> <p><strong>What we’re looking for</strong></p> <ul> <li>You think in automation: processes become pipelines / GitOps / IaC, not “procedures”.</li> <li>You have production discipline: stability, security, auditability, and clear ownership accountability.</li> <li>Programming experience, ideally with Java, and the ability to read and understand complex application codebases.</li> <li>Familiarity with software development lifecycle (SDLC) best practices and how they intersect with modern DevOps methodologies.</li> <li>Troubleshooting approach: facts (metrics/logs/symptoms) → hypothesis → change → verification.</li> </ul> <p> </p> <p><strong>What we offer</strong></p> <ul> <li>Work on real cloud-native initiatives for internal teams in Germany, with the flexibility to contribute where the need is highest.</li> <li>A small team, short decision paths, and real involvement in tooling and standards.</li> </ul>