Devops Platform Engineer CI/CD

Job Summary

Required Qualifications

• •Several years of hands-on experience as a Platform, DevOps, or CI/CD Engineer building and running CI/CD at scale
• •Deep, practical GitLab expertise
• •A DevSecOps mindset and secure software development lifecycle (SSDLC) know-how
• •A pragmatic Platform-as-a-Product mindset
• •Clear communication across engineering, security, and external partners
• •Fluent English

Desired Qualifications

• •Terraform experience
• •German or Romanian language skills
• •Kubernetes (GKE preferred)
• •Curiosity for emerging AI-assisted capabilities in the software delivery toolchain
• •Healthy judgment about where AI-assisted capabilities genuinely help developers
• •Experience with containers
• •Experience with artifact management
• •Experience with Helm
• •Experience with secure authentication patterns from CI to cloud (e.g. OIDC / workload identity federation instead of long-lived keys)
• •Experience with SAST
• •Experience with DAST
• •Experience with dependency and container scanning
• •Experience with secret detection
• •Experience with SBOM generation
• •Experience with image signing
• •Experience with policy enforcement
• •Experience with pipeline design
• •Experience with runners
• •Experience with container registry
• •Experience with merge-request workflows
• •Experience with administration of a GitLab instance as a product for developers
• •Experience with everything-as-code
• •Experience with treating pipelines, runners, and infrastructure as versioned, reviewable code
• •Experience with secure software development lifecycle (SSDLC)
• •Experience with shift-left security
• •Experience with embedded security into CI pipelines
• •Experience with runner topology on GKE
• •Experience with secure CI-to-GCP authentication
• •Experience with cost-efficient build patterns
• •Experience with evaluating and integrating AI-assisted features in the toolchain
• •Experience with pragmatic and governed AI integration
• •Experience with championing cultural shift from strict Dev/Ops separation toward DevOps teams with end-to-end ownership
• •Experience with supporting a strong platform and clear interfaces
• •Experience with pipelines
• •Experience with technical standards
• •Experience with code-review culture
• •Experience with architecture decision records
• •Experience with hybrid platform teams
• •Experience with Bucharest and Ulm locations
• •Experience with desk sharing and mobile working
• •Experience with regular in-person meet-ups
• •Experience with driving digitalisation
• •Experience with flat hierarchies
• •Experience with real freedom to shape your domain
• •Experience with green-field opportunities
• •Experience with brand-new GCP DevOps Platforms
• •Experience with pipeline templates
• •Experience with security gates
• •Experience with standards
• •Experience with application engineers
• •Experience with shipping software
• •Experience with build, test, scan, sign, and deploy stages
• •Experience with golden paths
• •Experience with YAML
• •Experience with managed, pre-configured pipeline templates
• •Experience with application teams
• •Experience with maintaining YAML
• •Experience with Müller
• •Experience with Europe's largest family-owned retailers
• •Experience with managed GitLab
• •Experience with GitLab directly at the core
• •Experience with everything-as-code foundations
• •Experience with golden-path pipelines
• •Experience with secure software development lifecycle with security built in from the first commit
• •Experience with seasoned experts
• •Experience with strong engineers ready to take real ownership
• •Experience with CI/CD and DevSecOps passion
• •Experience with shaping platforms
• •Experience with new GCP-based DevOps Platforms
• •Experience with one of Europe's largest family-owned retailers
• •Experience with hybrid in Bucharest
• •Experience with HR discussion
• •Experience with Technical interview X 2
• •Experience with owner and designer of this world
• •Experience with secure software development lifecycle (SSDLC) know-how
• •Experience with hands-on experience with SAST, DAST, dependency and container scanning, secret detection, SBOM generation, image signing, and policy enforcement
• •Experience with ideally embedded directly into CI pipelines (shift-left)
• •Experience with everything-as-code working style
• •Experience with treating pipelines, runners, and infrastructure as versioned, reviewable code (Terraform experience is a strong plus)
• •Experience with Solid command of the cloud-native delivery toolchain
• •Experience with containers, Kubernetes (GKE preferred), artifact management, Helm, and secure authentication patterns from CI to cloud (e.g. OIDC / workload identity federation instead of long-lived keys)
• •Experience with A pragmatic Platform-as-a-Product mindset
• •Experience with you prefer paved roads over one-off heroics
• •Experience with treat developers as customers
• •Experience with measure success by their flow, not by the sizeof your toolbox
• •Experience with Curiosity for emerging AI-assisted capabilities in the software delivery toolchain
• •Experience with a healthy judgment about where they genuinely help developers
• •Experience with Clear communication across engineering, security, and external partners
• •Experience with you can explain a pipeline architecture to a developer and its risk posture to a security reviewer on the same day
• •Experience with Fluent English required
• •Experience with German or Romanian is a plus
• •Experience with Own and shape the central service
• •Experience with our new, managed GitLab instance that serves as the primary source-code and CI/CD platform for all new development at Müller
• •Experience with Build the foundation for our everything-as-code approach on Google Cloud Platform
• •Experience with everything we run — infrastructure, policies, pipelines, and applications — flows throughGitLab into production
• •Experience with Design and deliver CI/CD building blocks that make life easier for developers
• •Experience with managed, pre-configured pipeline templates (golden paths) covering build, test, scan, sign, and deploy
• •Experience with so application teams ship software instead of maintaining YAML
• •Experience with Architect our secure software development lifecycle
• •Experience with establish SAST, DAST, dependency and container scanning, SBOM, secret detection, and image signing asstandard, automated stages of every pipeline
• •Experience with and evolve the toolchain as ourDevSecOps maturity grows
• •Experience with Shape key follow-up architecture decisions
• •Experience with including runner topology on GKE, secureCI-to-GCP authentication, and cost-efficient build patterns
• •Experience with Evaluate and integrate AI-assisted features in our toolchain where they create real value for developers
• •Experience with pragmatically and with sound governance
• •Experience with Champion the cultural shift from strict Dev/Ops separation toward DevOps teams with end-to-end ownership
• •Experience with supported by a strong platform, clear interfaces, and your pipelines
• •Experience with Collaborate closely with the hybrid platform team in Bucharest and Ulm
• •Experience with contribute to technical standards, code-review culture, and architecture decision records
• •Experience with A green-field opportunity on a brand-new GCP DevOps Platform
• •Experience with your pipeline templates, security gates, and standards will define how application engineers will ship software for years to come
• •Experience with A modern IT organisation with over 230 colleagues
• •Experience with flat hierarchies, and real freedom toshape your domain
• •Experience with Two locations, one team
• •Experience with work from Bucharest or Ulm with a flexible hybrid model
• •Experience with desk sharing and mobile working
• •Experience with regular in-person meet-ups across both locations
• •Experience with Great teams that enjoy driving Müller's digitalisation forward every day