Lead Cloud Native Architect (m/f/d)

About the position As a Lead Cloud Native Architect at T-Systems International GmbH, you will decisively shape the strategic orientation and development of our cloud native architecture. They have overall responsibility for designing, defining architecture standards and ensuring a scalable, consistent and secure platform landscape. Their expertise is critical for developing reference architectures, blueprints, and best practices, as well as for selecting and evaluating appropriate tools and technologies for our cloud native ecosystem. They ensure architecture compliance across all delivery streams, make strategic technology decisions and act as an architectural bracket that brings together individual solutions into a coherent and future-oriented platform. Their work ranges from strategy development and standardization to ensuring efficient and consistent cooperation between specialist teams in order to ultimately establish a highly secure and sovereign cloud infrastructure.

Your tasks

• Overall cloud native architecture design and strategic technology decisions
• Overall cloud native architecture design and strategic technology decisions
• Development of reference architectures, blueprints, and best practices for the platform
• Architecture governance across specialist teams (including platform, security, observability, storage/network)
• Monitoring architecture compliance across all delivery streams
• Selecting and evaluating tools and technologies for the cloud native ecosystem
• Close coordination with Lead Architect Open Source Cloud to ensure a consistent overall architecture
• Definition and enforcement of the security architecture including BSI IT basic protection compliance and accreditation preparation
• Architectural responsibility for service mesh with MTLs and zero trust network policies
• Design and monitoring of hardening standards (security benchmarks, policy engine, BSI basic IT protection)

Your profile

• You have deep Kubernetes expertise and experience with cloud native systems, CI/CD, GitOps (Flux) and Service Mesh
• Knowledge of Zero Trust, GitOps (including GitFlow) as well as experience with Crossplane, IronCore and Gardener is required
• You've also successfully launched at least three major DevOps applications

Must-Have Skills

• In-depth Kubernetes expertise
• CI/CD & GitOps (Flux)
• Service Mesh (MTLs, Zero-Trust Networking)
• Cloud native ecosystem
• Zero Trust
• Very good Git skills, including Git workflows such as GitFlow
• Experience with Crossplane and Gardener is essential
• BSI basic IT protection, accreditation processes and security architecture for sovereign platforms
• Policy engines for Kubernetes hardening
• Security benchmark compliance and systematic cluster hardening
• At least 3 large DevOps applications put into production
• German language skills at native speaker level as well as good spoken and written English skills.

Nice-to-have Skills

• Experience with Istio or other Service Mesh implementations
• Knowledge of observability tools (e.g. Prometheus, Grafana, Jaeger)
• Practical experience with common public cloud providers (e.g. AWS, Azure, GCP)
• Additional expertise in policy engines (e.g. OPA, Kyverno)

Its effect

They design the cloud-native architecture of a sovereign platform: from strategy and standards to scalable, secure infrastructure. Through blueprints, technology selection, and architecture governance, you ensure that specialist teams work efficiently and consistently. They are the architectural framework that brings together individual solutions to form a coherent platform.

What we offer

• Exciting and innovative projects in a cloud-native environment that are shaping the digital future.
• Flexible working hours
• Comprehensive training and development opportunities to constantly expand and keep your expertise up to date
• A collegial and agile working environment in a future-oriented team with open communication
• Attractive compensation and extensive social benefits (e.g. company pension scheme, health management)
• State-of-the-art work equipment and technology that make your daily work easier
• Diverse employee benefits and discounts
• A secure job in one of Europe's leading IT service companies

About T-Systems International GmbH

At T-Systems, we offer our business customers the right system solutions for their digital business. With our portfolio, we ensure that digital transformation reduces complexity, saves costs and makes everyday work easier. Our focus is on connectivity, digital, cloud & infrastructure as well as security - Let's power higher performance! Is this job made for you? Then take advantage of this opportunity! Please apply online. Severely disabled people are given priority if they are equally qualified. We are looking forward to seeing you! Your application for job advertisements outside Deutsche Telekom AG can also be processed outside Deutsche Telekom AG in other European countries. This also applies to the processing of applications for subsidiaries of Deutsche Telekom AG. For our civil servants, therefore, the following note: You are not required to attach documents relevant to personnel records, in particular civil service assessments, with your application. However, you are free to provide these documents voluntarily.