The EU Cyber Resilience Act (CRA) is fundamentally changing how we develop and deliver software within our R&D organization. To meet these requirements, we are expanding the tooling that keeps our software supply chain secure, traceable, and auditable.
- As part of our DevOps team in R&D, you will be responsible for our CRA tooling—Blackduck, Sonatype Lifecycle, and others—from implementation and operation to support and training of the development teams using these tools. You will be supported by the entire DevOps team.
- In addition, you will work on our R&D platform: You will operate and improve services on our Kubernetes clusters, use GitOps (ArgoCD) and GitHub Actions as the backbone of our deployments, drive migration and modernization projects for internal services, and coordinate with stakeholders in the global R&D organization.
- You will automate recurring tasks using Python (and eventually Go) — leveraging modern AI-powered development and tooling tools to work faster and more efficiently. You will debug across the entire stack — from the CI/CD pipeline to containers and Linux services — and collaborate closely with colleagues in Germany, the USA, China, and Japan.
Requirements:
- Solid Linux fundamentals and security on the command line
- Practical experience with containers (Docker) and a basic understanding of Kubernetes — sufficient to deploy, inspect, and troubleshoot workloads.
- Proficient use of Git and a scripting language such as Python or Bash
- A structured, analytical approach to work and a passion for understanding why something doesn't work-
- A strong willingness to continuously learn about new technologies and topics and to take on responsibility.
- Good English skills for communication in an international environment
Preferred qualifications:
Practical experience in operating Kubernetes clusters, ideally including migrations (e.g., Rancher).
- Kubernetes
- Experience with GitOps workflows (ArgoCD) and CI/CD with GitHub Actions
- Knowledge of Red Hat Enterprise Linux (RHEL)
- Experience with Go or the ability to read older Ruby scripts
- Initial contact with software composition analysis or supply chain security tools (Blackduck, Sonatype Lifecycle, etc.)
- Experience in the semiconductor industry
- Experience in AI-supported software development and in using AI tools in the developer workflow