Lead IT & Cloud Architect for Sovereign Cloud Platforms (m/f/d)

About the position As Lead IT & Cloud Architect for our Sovereign Cloud Initiatives, you will play a key role in shaping the future of highly secure and resilient cloud solutions at T-Systems International GmbH. They have overall technical responsibility for the architecture, development and implementation of complex cloud platforms, with a strong focus on data sovereignty, scalability and interoperability. Your tasks cover the entire life cycle, from designing groundbreaking open-source cloud architectures based on Linux virtualization, Kubernetes, and cncf projects to ensuring their robust operation. They are driving innovations in areas such as Kubernetes-based container orchestration, network virtualization (SDN), and bare metal provisioning. A crucial aspect of your role will be defining architecture standards, creating and reviewing Go (Golang) code, and working closely with various specialist teams and the lead architect on the client side. In addition, you design immutable OS stacks and design secure air-gap architectures for Kubernetes bootstrapping processes, which is crucial for environments with high security requirements, such as in the defense sector.

Your tasks

As a Lead IT & Cloud Architect, you act as a central technical person responsible for the development, integration and implementation of complex cloud solutions as part of product development initiatives — with a focus on customer requirements, innovation, quality and efficiency.

• Overall technical responsibility for the architecture and implementation of a sovereign cloud platform (IaaS service models: network, computing power, storage)
• Design and development of the open-source cloud architecture based on Linux virtualization, Kubernetes and CNCF projects
• Responsible for Kubernetes-based container orchestration and advanced orchestrator models
• Cross-architecture integration of network virtualization and SDN concepts
• Defining and monitoring architecture standards and reference architectures
• Preparation and review of Go code and define clear work packages for development teams
• Close cooperation with specialist teams (security, observability, storage/network) and the lead architect on the customer side
• Design and architecture of immutable OS stacks based on Linux including secure boot and PXE-based provisioning
• Design and responsibility for Kubernetes bootstrap processes in air-gap environments (USB ISO, etcd initialization, cluster bootstrapping)
• Evaluation and development of automation solutions for bare metal provisioning and OS lifecycle management

Your profile

• Understanding the architectural concepts of cloud computing, IaaS service models (network, compute, storage), and deployment models (public, private, and hybrid clouds)
• Mastering open-source cloud technologies such as Linux virtualization techniques (QEMU-KVM, Libvirt, Cloud Hypervisor) and key CNCF projects used in infrastructure orchestration
• Familiarity with network virtualization and SDN concepts
• Profound knowledge of open-source software development, including the use of tools such as Git, continuous integration methods, and collaboration best practices
• Profound knowledge of Kubernetes for container orchestration and advanced development topics such as orchestrator models
• Ability to create and validate code using the Go programming language
• Skills in creating detailed and clear work packages for development teams
• Experience with Immutable OS concepts (Linux or similar), Secure Boot Chain, and PXE-based bare metal provisioning
• Knowledge of Kubernetes cluster bootstrap procedures, in particular in air-gap and offline scenarios (USB ISO installation, etcd initialization).
• Experience in cloud architecture for defense & public sector with a focus on data sovereignty and high security requirements.
• German language skills at native speaker level as well as good spoken and written English skills.

Must-Have Skills

• Profound Kubernetes knowledge for container orchestration
• Ability to build and validate code in Go (Golang)
• Experience with PXE-based bare metal provisioning
• Knowledge of air gap architectures and cluster bootstrap in such environments

Nice-to-have Skills

• Experience in using agile development methods (e.g. Scrum, Kanban)
• Knowledge of other programming languages such as Python for automation and scripting
• Certifications in a cloud native environment (e.g. CKA, CKS)
• Experience with other configuration management tools (e.g. Ansible, Puppet, Chef)
• Familiarity with observability and monitoring tools (e.g. Prometheus, Grafana)

What we offer

• Creative freedom & innovation: Become part of a team that plays a key role in shaping T-Systems' sovereign cloud architecture and develops innovative solutions.
• Flexible working: Benefit from flexible working hours and modern mobile working models that enable a good balance between work and private life.
• Personal development: Comprehensive continuing education and training programs to continuously expand your technical skills and advance your career.
• Attractive compensation: A competitive salary package and additional social benefits (e.g. company pension scheme, employee benefits).
• Modern work environment: Work with the latest technologies and in a collaborative atmosphere at one of our locations or remotely.
• Team spirit & culture: An open and respectful corporate culture with flat hierarchies, in which teamwork and mutual support are very important.
• Work-life balance: Offers to promote your health and wellbeing to ensure a balanced quality of life.

About T-Systems International GmbH

At T-Systems, we offer our business customers the right system solutions for their digital business. With our portfolio, we ensure that digital transformation reduces complexity, saves costs and makes everyday work easier. Our focus is on connectivity, digital, cloud & infrastructure as well as security - Let's power higher performance! Is this job made for you? Then take advantage of this opportunity! Please apply online. Severely disabled people are given priority if they are equally qualified. We are looking forward to seeing you! Your application for job advertisements outside Deutsche Telekom AG can also be processed outside Deutsche Telekom AG in other European countries. This also applies to the processing of applications for subsidiaries of Deutsche Telekom AG. For our civil servants, therefore, the following note: You are not required to attach documents relevant to personnel records, in particular civil service assessments, with your application. However, you are free to provide these documents voluntarily.