Secure Build, Release & Observability Engineer (m/f/d)

Job description

Key responsibilities Design and operate CI/CD pipelines for repository intake, build execution, image creation, artefact promotion, environment deployment, and evidence generation. Implement release controls for private registries, package sources, signing, SBOM generation, vulnerability scanning, dependency provenance, and approval workflows. Create observability across build systems, workflow services, repositories, test environments, model endpoints, and platform components using logs, metrics, traces, and dashboards. Support troubleshooting of build failures, flaky pipelines, missing dependencies, environment drift, performance bottlenecks, and handover-readiness gaps. Partner with software, SRE, testing, and security teams to define runbooks, operational KPIs, risk indicators, and audit-ready evidence packs for release decisions. Examples of market tools, models, and platform components expected CI/CD and release tools such as GitLab CI, Jenkins, ArgoCD, Tekton, GitHub Enterprise, Helm, Docker, Kubernetes, Kaniko, BuildKit, Nexus, Harbor, or Artifactory. Security and supply-chain tooling such as Trivy, Grype, Syft, Cosign, SLSA-oriented controls, SBOM workflows, dependency scanning, secrets detection, and policy gates. Observability stacks such as Prometheus, Grafana, Loki, OpenTelemetry, ELK/OpenSearch, Alertmanager, log aggregation, dashboarding, and automated health checks. AI engineering integrations such as code-scanning workflows, model-backed log analysis helpers, documentation generators, internal model gateways, and workflow execution services. Infrastructure automation using Terraform, Ansible, Helm, Python, Bash, GitOps patterns, private networks, controlled proxies, package mirrors, and secure secrets management. 5+ years in DevOps, SRE, release engineering, platform operations, infrastructure automation, or secure build engineering roles. Strong hands-on experience with CI/CD systems, Kubernetes-based delivery, container builds, private registries, artefact management, and release automation. Practical knowledge of observability, incident response, operational dashboards, runbooks, SLA/SLO thinking, and troubleshooting distributed engineering environments. Good understanding of software supply-chain security, SBOMs, image scanning, secrets handling, dependency provenance, and audit-ready release evidence. Comfortable operating in confidentiality-sensitive programs where reproducibility, traceability, controlled access, and structured collaboration with engineering teams are essential. What do we offer you? Work environment & flexibility International, dynamic and collaborative environment. T-Social: social initiatives (sports, community, health, ...). Hybrid work model (remote/on-site). Flexible working hours. Growth & development Customized training: access to Coursera to learn whatever you want, whenever you want. Weekly language classes (English & German). International Mentoring Sessions & Experience Days. Compensation & benefits Flexible compensation plan (health insurance, meal vouchers, childcare, transport). Telemedicine. Life and accident insurance. Social fund. Wellbeing & time off 26+ working days of vacation per year. Free access to specialist services (medical, legal, wellness). 100% salary coverage during medical leave. And many more advantages of being part of T-Systems! If you are looking for a new challenge, do not hesitate to send us your CV! Please send CV in English. Join our team! T-Systems Iberia will only process the CVs of candidates who meet the requirements specified for each offer. T‑Systems is part of the Deutsche Telekom Group, with around 30.000 employees worldwide. We create technology with purpose to generate a positive impact on society. We are looking for curious talent, eager to learn, take on challenges, and contribute ideas that transform our customers’ experience. We trust people: we offer autonomy, continuous support, and a collaborative environment where you can grow without limits. We are one global team, guided by respect, integrity, and a passion for doing better every day.