Cloud Platform & DevOps Engineer (OpenShift / Core Banking)

  • Model: B2B | Full-time in 2026 → Part-time / Advisory in 2027

  • Location: 100% Remote

  • Start: ASAP

Tech Landscape

  • Platform: Red Hat OpenShift, Kubernetes, Helm, GitOps

  • Security & Traffic: Ingress/Routes, mTLS, PKI, Certificate Lifecycle, Secrets Management, OIDC

  • Pipelines & Workloads: Containerized Java (Spring Boot), Apache Kafka, Oracle, IBM DB2, JDBC

  • Cloud & Tools: Enterprise Banking Infrastructure, GCP (nice to have)

The Mission

A major bank is moving its securities processing from an old mainframe to a modern, cloud-native OpenShift setup.

You won’t need to build clusters from scratch or write Helm charts from zero, the client provides the platform and base templates.

Your job is purely practical: configure the environments, secure the network connections, deploy the services via Helm, and make sure the apps talk smoothly to Kafka and backend databases (Oracle/DB2).

What You Will Do

  • Shape the Target Environments: Tailor OpenShift namespaces, configure traffic ingress/routing, and establish the baseline environment configurations that test and production stages will replicate.

  • Tackle Network & Security Plumbing: Map and validate firewall matrices; establish resilient, encrypted connections (mTLS, PKI) between Spring Boot services, Kafka event streams, and relational data stores (Oracle/DB2).

  • Automate & Orchestrate: Parameterize Helm deployments via environment-specific values, implement GitOps release pipelines, and design failsafe upgrade and rollback paths.

  • Document for Production Readiness: Translate architectural requirements into practical runbooks, connectivity sheets, and deployment guides to prepare operational teams for the live 2027 cutover.

  • Collaborate Across Streams: Partner with database administrators, mainframe developers, and security architects to resolve integration blockers and align on identity (OIDC) and access configurations.

Who We Are Looking For

  • OpenShift & Kubernetes Practitioner: Track record of managing workloads on Red Hat OpenShift within tightly regulated, enterprise-grade ecosystems.

  • Deployment Automation Pro: Thorough understanding of Helm architecture, GitOps patterns, environment branching, and automated release rollbacks.

  • Security-Minded Engineer: Practical expertise with enterprise secrets management, PKI, certificate distribution, and mutual TLS authentication.

  • Integration Troubleshooter: Hands-on experience debugging connectivity issues between containerized Java applications, message brokers (Kafka), and enterprise relational databases.

  • Works independently and is comfortable using English on a daily basis.

Bonus Points:

  • Ability to read technical documentation in German (vendor specifications).

  • Prior exposure to Google Cloud Platform (GCP).

  • Domain knowledge in securities processing, clearing, or corporate actions.