• Own the reliability, availability, performance, and scalability of Claritas Rx's AWS-hosted SaaS platform, with accountability for SLA/SLO commitments made to customers. • Define and maintain Service Level Objectives (SLOs) and Service Level Indicators (SLIs) across all production services; use error budgets to drive engineering prioritization conversations. • Lead incident response and on-call operations: triage, coordinate resolution, communicate to stakeholders, and conduct thorough post-incident reviews with actionable corrective actions. • Drive a proactive reliability culture — identifying risks before they become incidents through load testing, chaos engineering, and systematic failure mode analysis. • Architect, build, and maintain AWS cloud-native infrastructure using infrastructure-as-code (AWS CDK, Terraform, or equivalent), ensuring environments are reproducible, auditable, and secure. • Oversee and continuously improve CI/CD pipelines (GitHub Actions) to enable rapid, safe, and consistent delivery of application and infrastructure changes across environments. • Manage and optimize core AWS services including ECS, EC2, Aurora RDS, DynamoDB, Lambda, S3, SQS, EventBridge, Cognito, Secrets Manager, and CloudFront. • Ensure robust observability across the stack — centralizing logs, metrics, traces, and alerts using CloudWatch, Sentry, and related tooling — so the team can detect and respond to issues quickly. • Manage platform capacity planning, cost optimization, and cloud spend governance. • Ensure all infrastructure design and operational practices meet HIPAA, SOC 2, and HITRUST requirements, given the PHI our platform processes. • Partner with the Security function on vulnerability management, infrastructure hardening, secrets management, and access control. • Maintain and regularly test disaster recovery (DR) and business continuity plans, including defined RTO/RPO targets for all production systems. • Support audit readiness and evidence collection for compliance certifications. • Lead, mentor, and grow a blended team of full-time SREs/DevOps engineers and offshore contractors, fostering a culture of ownership, continuous improvement, and operational excellence. • Manage distributed team dynamics effectively — establishing clear communication rhythms, documentation standards, and handoff protocols to ensure offshore resources are productive and well-integrated. • Conduct regular 1:1s, set clear goals and development plans for direct reports, and advocate for your team's growth and recognition. • Build and maintain a healthy on-call rotation with appropriate tooling, runbooks, and escalation paths to protect team sustainability. • Collaborate with Software Engineering teams to embed reliability practices into the SDLC — including production readiness reviews, deployment standards, and shared observability tooling. • Work with Product Management and Engineering leadership to balance feature delivery velocity against operational risk and technical debt. • Contribute to architecture decisions across the platform, providing an operational and reliability perspective on new services and major technical changes. • Champion automation-first thinking: eliminate toil through tooling, scripting, and process improvement wherever possible.

• You actively contribute to advancing digitalization in German municipalities and ministries and design sustainable software solutions that our customers (m/f/d) love. • You develop, orchestrate and optimize Kubernetes environments. • You take responsibility for building, maintaining and optimizing CI/CD pipelines and support the software development team with local development environments. • You continuously drive the automation of deployments and software development processes. • You analyze and resolve technical issues in a targeted manner and work closely with network and security colleagues.

• Build and own the DevSecOps function from the ground up (in the security team), defining strategy, roadmap, priorities, and success metrics; • Assess the current security posture of applications, infrastructure, cloud environments, and development processes; • Design and implement security controls across the software development lifecycle; • Establish and maintain secure CI/CD practices, including security gates and automated validation processes; • Integrate security checks into engineering workflows with a strong focus on automation and developer experience; • Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting; • Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments; • Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection; • Develop Infrastructure-as-Code security standards and policy-as-code controls; • Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response; • Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams; • Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

• Build and own the DevSecOps function from the ground up (in the security team), defining strategy, roadmap, priorities, and success metrics; • Assess the current security posture of applications, infrastructure, cloud environments, and development processes; • Design and implement security controls across the software development lifecycle; • Establish and maintain secure CI/CD practices, including security gates and automated validation processes; • Integrate security checks into engineering workflows with a strong focus on automation and developer experience; • Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting; • Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments; • Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection; • Develop Infrastructure-as-Code security standards and policy-as-code controls; • Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response; • Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams; • Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.