Job Description

Key Responsibilities

• Design and operate CI/CD pipelines for repository intake, build execution, image creation, artefact promotion, environment deployment, and evidence generation.

• Implement release controls for private registries, package sources, signing, SBOM generation, vulnerability scanning, dependency provenance, and approval workflows.

• Create observability across build systems, workflow services, repositories, test environments, model endpoints, and platform components using logs, metrics, traces, and dashboards.

• Support troubleshooting of build failures, flaky pipelines, missing dependencies, environment drift, performance bottlenecks, and handover-readiness gaps.

• Partner with software, SRE, testing, and security teams to define runbooks, operational KPIs, risk indicators, and audit-ready evidence packs for release decisions.

Examples of market tools, models, and platform components expected

• CI/CD and release tools such as GitLab CI, Jenkins, ArgoCD, Tekton, GitHub Enterprise, Helm, Docker, Kubernetes, Kaniko, BuildKit, Nexus, Harbor, or Artifactory.

• Security and supply-chain tooling such as Trivy, Grype, Syft, Cosign, SLSA-oriented controls, SBOM workflows, dependency scanning, secrets detection, and policy gates.

• Observability stacks such as Prometheus, Grafana, Loki, OpenTelemetry, ELK/OpenSearch, Alertmanager, log aggregation, dashboarding, and automated health checks.

• AI engineering integrations such as code-scanning workflows, model-backed log analysis helpers, documentation generators, internal model gateways, and workflow execution services.

• Infrastructure automation using Terraform, Ansible, Helm, Python, Bash, GitOps patterns, private networks, controlled proxies, package mirrors, and secure secrets management.

Qualifications

• 5+ years in DevOps, SRE, release engineering, platform operations, infrastructure automation, or secure build engineering roles.

• Strong hands-on experience with CI/CD systems, Kubernetes-based delivery, container builds, private registries, artefact management, and release automation.

• Practical knowledge of observability, incident response, operational dashboards, runbooks, SLA/SLO thinking, and troubleshooting distributed engineering environments.

• Good understanding of software supply-chain security, SBOMs, image scanning, secrets handling, dependency provenance, and audit-ready release evidence.

• Comfortable operating in confidentiality-sensitive programs where reproducibility, traceability, controlled access, and structured collaboration with engineering teams are essential.

Additional Information

What do we offer you?

Work environment & flexibility

• International, dynamic and collaborative environment.

• T-Social: social initiatives (sports, community, health, ...).

• Hybrid work model (remote/on-site).

• Flexible working hours.

Growth & development

• Customized training: access to Coursera to learn whatever you want, whenever you want.

• Weekly language classes (English & German).

• International Mentoring Sessions & Experience Days.

Compensation & benefits

• Flexible compensation plan (health insurance, meal vouchers, childcare, transport).

• Telemedicine.

• Life and accident insurance.

• Social fund.

Wellbeing & time off

• 26+ working days of vacation per year.

• Free access to specialists services (medical, legal, wellness).

• 100% salary coverage during medical leave.

And many more advantages of being part of T-Systems! If you are looking for a new challenge, do not hesitate to send us your CV! Please send CV in English. Join our team! T-Systems Iberia will only process the CVs of candidates who meet the requirements specified for each offer.

Your Task

This role focuses on designing and operating CI/CD pipelines, implementing release controls, creating observability systems, and supporting troubleshooting efforts across build systems and platform components. You will partner with cross-functional teams to define operational standards and audit-ready evidence for release decisions.

Key Responsibilities

• Design and operate CI/CD pipelines for repository intake, build execution, image creation, artefact promotion, environment deployment, and evidence generation

• Implement release controls for private registries, package sources, signing, SBOM generation, vulnerability scanning, dependency provenance, and approval workflows

• Create observability across build systems, workflow services, repositories, test environments, model endpoints, and platform components using logs, metrics, traces, and dashboards

• Support troubleshooting of build failures, flaky pipelines, missing dependencies, environment drift, performance bottlenecks, and handover-readiness gaps

• Partner with software, SRE, testing, and security teams to define runbooks, operational KPIs, risk indicators, and audit-ready evidence packs for release decisions

Examples of Market Tools, Models, and Platform Components Expected

• CI/CD and release tools such as GitLab CI, Jenkins, ArgoCD, Tekton, GitHub Enterprise, Helm, Docker, Kubernetes, Kaniko, BuildKit, Nexus, Harbor, or Artifactory

• Security and supply-chain tooling such as Trivy, Grype, Syft, Cosign, SLSA-oriented controls, SBOM workflows, dependency scanning, secrets detection, and policy gates

• Observability stacks such as Prometheus, Grafana, Loki, OpenTelemetry, ELK/OpenSearch, Alertmanager, log aggregation, dashboarding, and automated health checks

• AI engineering integrations such as code-scanning workflows, model-backed log analysis helpers, documentation generators, internal model gateways, and workflow execution services

• Infrastructure automation using Terraform, Ansible, Helm, Python, Bash, GitOps patterns, private networks, controlled proxies, package mirrors, and secure secrets management

Your Profile

We are seeking a highly skilled DevOps/SRE Engineer with extensive experience in CI/CD pipeline management, release engineering, and secure build operations. The ideal candidate will have strong expertise in Kubernetes-based delivery, container orchestration, observability, and software supply-chain security within confidentiality-sensitive environments.

Must Have Skills

• 5+ years of experience in DevOps, SRE, release engineering, platform operations, infrastructure automation, or secure build engineering roles

• Strong hands-on experience with CI/CD systems

• Strong hands-on experience with Kubernetes-based delivery

• Strong hands-on experience with container builds

• Strong hands-on experience with private registries

• Strong hands-on experience with artefact management

• Strong hands-on experience with release automation

• Practical knowledge of observability

• Practical knowledge of incident response

• Practical knowledge of operational dashboards

• Practical knowledge of runbooks

• Practical knowledge of SLA/SLO thinking

• Practical knowledge of troubleshooting distributed engineering environments

• Good understanding of software supply-chain security

• Good understanding of SBOMs (Software Bill of Materials)

• Good understanding of image scanning

• Good understanding of secrets handling

• Good understanding of dependency provenance

• Good understanding of audit-ready release evidence

• Experience operating in confidentiality-sensitive programs with reproducibility and traceability requirements

• Experience with controlled access and structured collaboration with engineering teams

• Experience with CI/CD and release tools such as GitLab CI, Jenkins, ArgoCD, Tekton, GitHub Enterprise, Helm, Docker, Kubernetes, Kaniko, BuildKit, Nexus, Harbor, or Artifactory

• Experience with security and supply-chain tooling such as Trivy, Grype, Syft, Cosign, SLSA-oriented controls, SBOM workflows, dependency scanning, secrets detection, and policy gates

• Experience with observability stacks such as Prometheus, Grafana, Loki, OpenTelemetry, ELK/OpenSearch, Alertmanager, log aggregation, dashboarding, and automated health checks

• Experience with infrastructure automation using Terraform, Ansible, Helm, Python, Bash, GitOps patterns, private networks, controlled proxies, package mirrors, and secure secrets management

• Knowledge of AI engineering integrations such as code-scanning workflows, model-backed log analysis helpers, documentation generators, internal model gateways, and workflow execution services