Make an Impact by:
The Platform Engineer is accountable for embedding security into DCS’s cloud and platform foundations, ensuring that security controls are designed, implemented, automated, and operated as part of the platform lifecycle rather than treated as an afterthought.This role acts as a technical security enabler for the platform, working closely with the Information Security Officer to ensure that security requirements are translated into scalable, reliable, and auditable technical controls across cloud infrastructure, CI/CD pipelines, and identity platforms.
Design and operate secure-by-default cloud platform components on Azure, including network, computer, Kubernetes, and storage security.
Implement platform-level security guardrails and baseline configurations using Infrastructure as Code (e.g., Terraform).
Define and enforce strong identity, access, and privilege management (RBAC, least privilege, JIT/privileged access).
Embed security controls into CI/CD pipelines (secure builds, secrets management, dependency and artifact integrity) following DevSecOps best practices.
Enable security monitoring, logging, and SIEM integration; facilitate incident result and platform-level threat detection.
Build vulnerability management, secure patching, and compliance with security frameworks (e.g., ISO 27001, TISAX).
Partner with engineering teams to build, operate, and continuously improve a reliable, scalable Azure/Kubernetes platform, including developer self-service and operational support
Your Profile
- Strong hands-on experience with cloud security in Azure environments, including designing and implementing security controls.
- Proven experience implementing security through automation using Infrastructure as Code (Terraform), CI/CD pipelines, and policy-as-code.
- Hands-on expertise with Kubernetes (preferably AKS) and microservices / event-focused architectures.
- Experience with CI/CD and GitOps practices (Azure DevOps or equivalent tools).
- Strong Linux fundamentals and scripting skills (Python and/or Shell) for automation; configuration management tools (e.g., Ansible) are a plus.
- Experience with monitoring, observability, and platform security tooling (e.g., OpenTelemetry, Prometheus/Grafana, container security tools), with exposure to DevSecOps and compliance frameworks (ISO 27001, TISAX) considered an advantage.
We Offer:
- A unique opportunity combining the energy of a scale up with the power of BMW, Mercedes Benz Mobility & bp
- Working on products & services with a high social impact
- An international team of talented people who love what they do and live a collaborative spirit
- An open minded culture with room for growth and the freedom to bring in own ideas
- Subsidized gym membership
- Subsidized office lunch benefit
- Personal development budget for your professional growth
- Monthly mobility budget
- Up to 2 days of home office in a week
- Offsite/ team events & much more and modern, sunny offices in Berlin & Munich
… and of course the classics: delicious coffee & tea, fresh fruits and an office dog friendly environment
At DCS we acknowledge the value of diversity, promote equality and challenge unfair discrimination. We strive to create an inclusive work environment, safe for anyone regardless of their gender identity, sexual orientation, abilities, ethnicity or race. We have the clear goal of driving diversity and inclusion across all dimensions and treat each applicant with the same respect and consideration.