Role Description We are seeking a Security Platform Lead to own the design and implementation of security-focused platform capabilities across identity, secrets protection, encryption-adjacent controls, access governance, secure storage, system hardening, and compliance readiness. This role is responsible for embedding security into platform architecture and delivery while supporting auditability, operational resilience, and secure engineering practices. Key Responsibilities - Lead security architecture and implementation across platform, application, and operational layers. - Design and guide implementation of secure secrets management, certificate handling, privileged access controls, and service authentication patterns. - Define security controls for identity, access, role governance, session security, audit logging, and administrative workflows. - Guide secure storage, immutability, logging integrity, and cryptographic boundary design decisions. - Define security baselines, hardening standards, and implementation guardrails for environments and services. - Review architecture, code, configurations, and workflows for security risks and mitigations. - Support incident readiness, disaster recovery planning, and operational validation from a security perspective. - Produce and review security design documents, control narratives, configuration standards, and remediation plans. Qualifications - Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience. - 7+ years of experience in security engineering, platform security, cloud security, or secure systems design. - Direct experience designing or implementing systems that must align with FIPS 140-3 cryptographic module requirements or validated cryptographic modules where required. - Strong familiarity with NIST SP 800-171 control implementation in nonfederal environments handling CUI. - Ability to translate security requirements into technical controls for authentication, authorization, secrets handling, logging, system hardening, audit trails, and resilience. - Experience with compliance-oriented security architecture, control mapping, and technical evidence preparation. - Strong documentation and communication skills. Preferred Qualifications - Experience with NIST SP 800-172 enhanced safeguards, especially cyber resiliency, defense-in-depth, and protection of higher-value systems. - Experience with Kubernetes security, workload identity, certificate lifecycle, and secure service communication. - Experience with secrets platforms, key protection workflows, privileged access control, or hardware-backed security solutions. - Security certifications such as CISSP, CCSP, Security+, or equivalent. Benefits - 401(k) - Dental insurance - Health insurance Project Overview - Project Type: Secure software and platform implementation program - Security Context: Environment requiring support for FIPS 140-3 and alignment to NIST SP 800-171 / 800-172 expectations (cryptographic boundary design experience required) - Project Duration: Estimated 12-month engagement from kickoff through final delivery, validation, training, and closeout. - Technology Stack: Frontend --- Next.js, Backend --- Python and Java Success Profile - Security-first mindset. - Pragmatic and delivery-oriented. - Strong architecture discipline. - Able to work closely with developers and platform engineers. This is a remote position.

Anstellungsdetails Permanent contract, Full or Part-Time, Remote or Cologne / Darmstadt / Düsseldorf / Berlin Info Who we are We are the tech powerhouse behind Kaufland’s international online marketplaces and a company within the Schwarz Group. Driven by a start-up mentality and working on an equal footing within flat hierarchies, we develop the best marketplace solutions for our customers, sellers and partners. #FromEuropeForEurope Day by day, our Tech & Product Team of about 400 experts pursues the goal of creating the best possible customer shopping experience for our online marketplace. Through innovative technical developments, they not only create an outstanding shopping experience but also lay the foundation for an optimal selling experience for our sellers. Learn more about our division, areas, and cross-functional teams here! Aufgaben Your tasks – this is what awaits you in detail - You will orchestrate and design our data stores and messaging systems, including technologies like MySQL, PostgreSQL, MongoDB, RabbitMQ, and Redis. You optimize these systems to deliver scalable, highly available, maintainable, cross-region solutions - As part of one of our Platform teams, your goal is to deliver the best possible developer experience to our product teams and guarantee reliable and performant production and development environments - Example tasks you could work on: - You partner with our engineering teams to identify and optimize slow queries - You consult with different engineering teams to help them choose and implement the most suitable database solutions for their needs - You manage the lifecycle of our database fleet, streamlining maintenance to minimize downtime and keep our systems secure Profil Your profile – this is what we expect from you - You bring extensive knowledge of MySQL and MongoDB, ideally complemented by experience with PostgreSQL, RabbitMQ, and Redis - You have a proven track record of optimizing databases at scale, ensuring high performance in demanding environments - You possess extensive experience in managing infrastructure as code, specifically using Terraform and preferably Ansible - You understand the workflows and technical challenges software engineers face when interacting with the database stack and enjoy providing tailored solutions for their use cases - You combine analytical troubleshooting skills with fluency in coding and a deep understanding of high-traffic, high-availability system architecture - You are a proactive team player who enjoys collaborating across functions, sharing knowledge, and striving for continuous learning - You embrace AI-driven development and utilize modern AI tools to increase your efficiency so you can focus on problem-solving and high-quality output within a fast-paced environment - You are fluent in English (C1), possess excellent communication skills, and enjoy working in an international environment Benefits What we offer - Create your own work-life balance: You have the flexibility to choose between working remotely (within Germany) or from one of our locations in Cologne, Darmstadt, Düsseldorf, or in Berlin! - Do you want to move to Germany? No problem – we offer you an attractive relocation package to give you a smooth start. - Urban Sports Club and RSG Group Fitness Studios: Get top deals for fitness, swimming, yoga and more - Mental Well-Being: We support you on your well-being journey with special offerings such as Instahelp, the digital platform for online psychological counseling - Vacation & Sabbatical: Enjoy 30 days of vacation per year and the opportunity to take a sabbatical once you have been part of the team for a certain period! - Option for Pluxee restaurant vouchers: Buy Pluxee vouchers through us and benefit from tax-advantaged meal allowances! - ‘Deutschlandticket’: We subsidise your train season ticket for more mobility - Employee Discount: You will receive a monthly coupon for Kaufland.de - Free choice of operating system: MacOS or Ubuntu Linux, it's up to you - Boost your growth: Benefit from our online language learning programs, diverse in-house training, and our automated 360-degree feedback. We cover the costs for relevant conferences, training opportunities, and approved team workshops to strengthen personal interactions - This is who we are: Our dynamic culture combines flat hierarchies, a start-up mentality, an international team of over 65 nationalities, and the strength of the Schwarz Group to provide you an agile and secure working environment. - We are team players: From day one, you will connect not only with your team but also with others through our digital onboarding journey, the buddy program, and regular team and company events, all-hands meetings, powerful mornings, and much more! Check out our Principles & our blog for even more insights into our company culture! Diversity at Kaufland e-commerce We welcome applications from everyone, regardless of skin colour, sexual orientation, gender identity, age, disability, ethnic origin, religion and ideology. We are signatories to the Charta der Vielfalt (German Diversity Charter) – because we know that extraordinary things can only be achieved with diversity. Read more here! When applying, you can optionally include your pronouns in your resume. Bewerben Why are you the perfect fit for this position? Don't bother with cover letters - we're interested in facts and figures! Feel free to share your Github profile with us in your application. As we have very international teams, we would highly appreciate it to receive your CV or profile link in English. Ansprechpartner Your contact person: Lisa Fischer Kaufland e-commerce Services GmbH & Co. KG Postal address: Habsburgerring 2 50674 Köln We are looking forward to your application!

• Design and build agentic workflows and orchestration systems • Implement RAG pipelines (retrieval, embeddings, context building) • Integrate LLMs (hosted/private) into enterprise workflows • Build QA scoring, evaluation, and feedback loops • Optimize prompts, latency, and response quality • Ensure secure data handling (no-retention, in-memory processing) • Collaborate with platform and FDE teams for real-world deployments

• As a Platform Engineer at Clovr Labs, you’ll be a critical part of our engineering team • Responsible for designing, building, and maintaining the infrastructure that supports our products and developer platforms • Design and maintain scalable, reliable infrastructure using cloud-native technologies (AWS/Hetzner, Kubernetes/Helm, Terraform, Ansible, etc.) • Automate deployment pipelines for CI/CD workflows across various environments and services • Develop platform tooling that empowers developers to build and ship faster with high confidence • Ensure system observability through robust monitoring, logging, and alerting solutions • Collaborate closely with AI and frontend/backend teams to ensure smooth integration of infrastructure with Clovr’s product ecosystem • Champion infrastructure as code and modern DevOps practices to ensure repeatability and scalability • Participate in a rotating 24h on-call schedule (standby compensated)