Senior DevOps Engineer

About Us

At Novasign, we’re redefining the future of bioprocessing. Our platform, Novasign Studio, combines intelligent hybrid models, automation, and modern microservices (SOA) architecture to accelerate the development of life-saving therapies, next-generation enzymes, and sustainable food technologies.

We’re scaling fast with a growing customer base across biotech and life sciences. If you’re looking to make a real-world impact with cutting-edge machine learning and SaaS technology, we want to hear from you. We’re hiring ten new team members in the next four months, and this role is critical in driving our growth.

Role Summary

We are seeking a Senior DevOps Engineer to develop and evolve our infrastructure, deployment, and automation practices as part of the software engineering team. You will design, implement, and maintain scalable, secure, and reliable cloud and on-premise environments for Novasign Studio. This role is ideal for someone who thrives in a fast-paced, cross-functional environment and is passionate about automation, CI/CD, and modern DevOps tooling. You will focus on authoring native Kubernetes operators/controllers (Go preferred), building deployment packages for on-prem and AWS (EKS expertise), and implementing hybrid deployments requiring socket programming and concurrency. You will also contribute to best practices in observability, security, and cost optimization.

You will work with a modern stack including Kubernetes (k3d/k3s, Helm, Tilt), Docker, Pulumi, ArgoCD, and a wide range of CNCF and open-source tools. You will help implement GitOps, IaC, and progressive delivery, and support a provider-based architecture for flexibility between cloud and on-premises.

Key Responsibilities

• Contribute to design and implementation of cloud and on-premise infrastructure using tools like Kubernetes (k3d/k3s, Helm, Tilt), Docker, and modern IaC solutions with emphasis on AWS, Pulumi, OpenTofu, and Helm

• Author native Kubernetes operators/controllers in Go (Crossplane knowledge is desirable)

• Build deployment packages for on-prem and AWS (EKS expertise required)

• Design and maintain CI/CD pipelines with tools like Jenkins, GitLab CI, or Dagger, focusing on automation and security best practices (specific tool experience is flexible)

• Implement GitOps and progressive delivery using Argo CD, Argo Rollouts, and Helm

• Ensure security, compliance, and reliability across all environments

• Implement and manage observability stack (Prometheus, Grafana, Loki, Jaeger, Zipkin) and logging (Fluent Bit)

• Manage service mesh (Istio, Linkerd, Consul Connect) and API gateways (Envoy, Kong, AWS API Gateway)

• Handle secret management (HashiCorp Vault, AWS Secrets Manager, Kubernetes secrets, Docker BuildKit Secrets) and policy enforcement (OPA Gatekeeper, Kyverno)

• Manage container registries (Harbor, ECR, Artifactory) and image-scanning (Trivy or other tools)

• Use testing frameworks (Go, Python, C#) and chaos-engineering (Litmus, Chaos Mesh)

• Participate in incident response, troubleshooting, and root cause analysis for infrastructure issues

• Share knowledge and best practices with team members, while being open to feedback, alternative approaches, and constructive criticism

• Document infrastructure, processes, and architectural decisions (ADR, C4)

• Engage in cross-team discussions and continuously learn new technologies and patterns

• Contribute to framework/library upgrades and technical debt reduction

Required Qualifications

• Bachelor’s/Master’s in Computer Science, Software Engineering, or related field

• 5+ years of experience in DevOps, SRE, or infrastructure engineering roles

• Deep expertise with Kubernetes (k3d/k3s, Helm, Tilt), Docker, and container orchestration

• Strong, hands-on experience with AWS (mandatory)

• Proficiency in Helm, and IaC tools like Pulumi, and Terraform or OpenTofu

• Proficiency in Argo CD and Argo Rollouts

• Experience with Dapr and Dapr-enabled applications

• High-level proficiency in Go (preferred) and/or Python (mandatory: at least one, with Go strongly preferred)

• Strong scripting skills (Bash)

• Experience authoring Kubernetes operators/controllers (Go preferred)

• Proven experience with CI/CD pipelines (Jenkins, GitLab CI, or Dagger) and security best practices

• Familiarity with observability stack (Prometheus, Grafana, Loki, Jaeger, Zipkin), logging (Fluent Bit), and service mesh (Istio, Linkerd, Consul Connect)

• Experience with secret management (HashiCorp Vault, AWS Secrets Manager, Kubernetes secrets, Docker BuildKit Secrets) and policy enforcement (K8s RBAC, OPA Gatekeeper, Kyverno)

• Experience with container registries (Harbor, ECR, Artifactory) and image-scanning (Trivy or other tools)

• Experience with packaging and release tools (Helm; Kustomize, Argo Rollouts are a plus)

• Experience supporting provider-based architectures and modular design

• Solid understanding of networking, security, and compliance in cloud environments

• Excellent English communication skills

Preferred Qualifications

We welcome applicants who meet most —but not necessarily all—of the preferred qualifications listed below.

Priority levels: ●● Highly Desirable | ● Desirable

• Crossplane and advanced Kubernetes operator patterns ●●

• Cloud, on-premise, and hybrid deployments techniques ●●

• Multi-tenancy concepts on K8s and cloud infrastructure ●●

• Kustomize, Argo Rollouts ●●

• SRE practices, chaos engineering, and incident management ●

• Cost monitoring (Kubecost or OpenCost), performance profiling (pprof, Py-instrument), and SRE practices (SLOs via Prometheus Operator) ●

• Cost optimization and resource management in cloud environments ●

• Security best practices and compliance frameworks ●

• CNCF and open-source tools for infrastructure and automation ●

• Devbox, Make/Task, and GoLang CLI tools ●

• Proficiency with other cloud providers like GCP or Azure ●

• German proficiency is a plus

What We Offer

• Innovation Culture: We are an international team. We value new ideas, open discussions, and constructive criticism. Your voice shapes our technological direction

• Professional Growth: Continuous learning opportunities and career development in cutting-edge software

• Meaningful Impact: Work on software that accelerates life-saving therapies, enzyme manufacturing and sustainable food production

• Competitive Package: We offer an attractive salary above industry standards, complemented by comprehensive benefits, including a free food allowance. In accordance with the IT collective agreement (minimum ST1 – Regelstufe), the minimum gross annual salary is €53,802; however, your actual compensation will reflect your skills, experience, and impact and will be significantly higher

• Full time (38,5 h/week) – 25 days of paid holidays per full calendar year

How to Apply

Please apply directly via our LinkedIn job posting (preferred). This route ensures your application is tracked correctly and reaches the hiring team the fastest.

If applying through LinkedIn is not possible, you may instead email us at [email protected] with the subject line “Senior DevOps Engineer” and include your CV, GitHub (or comparable) profile, and a short cover letter.

We review applications on a rolling basis and aim to respond within one week.