Introduction text

Schwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data & AI, Communication, and Workspace.

Join us and contribute to digital sovereignty in Europe. With us, you will work at the intersection of agility and security: You will benefit from fast decision-making processes, enjoy genuine creative freedom in your projects, and be able to build upon the stable foundation of the Schwarz Group.

Your Tasks

• Drive technical direction and engineering standards within a security-centric engineering team in a high-performance cloud platform environment.
• Architect and implement cloud-native security products in Go, optimizing for high throughput, zero-allocation, and low-latency execution within Kubernetes control planes.
• Develop custom Kubernetes Operators, Admission Controllers, and Custom Resource Definitions (CRDs) for deterministic, automated policy enforcement and real-time threat remediation.
• Utilize Linux kernel primitives (eBPF, cgroups, namespaces) to engineer robust observability pipelines and runtime protection agents.
• Lead the design and deployment of zero-trust architectures and identity-aware proxies capable of processing hyperscale traffic volumes.
• Take end-to-end ownership of the security service lifecycle, from architecture and multi-region deployment to implementing SLI/SLO-driven monitoring and graceful degradation strategies.
• Engage in the full lifecycle of our security services by championing a "you build it, you run it" philosophy and a blameless post-mortem culture to continuously harden our products.

Your Profile

• Proven experience in Go or a comparable, modern programming language (e.g., Python, Rust, C++, Java), of benefit is a deep understanding of the Go memory model, concurrency paradigms (CSP), and advanced profiling tools (pprof, trace).
• Comprehensive, expert-level understanding of Kubernetes internals, control plane mechanics, and the broader CNCF ecosystem.
• Deep, battle-tested expertise in securing Linux kernels and the Kubernetes Control Plane, with extensive experience leveraging primitives like AppArmor, SELinux, Seccomp, and eBPF.
• Practical experience designing and integrating authorization and identity frameworks (e.g., OPA, SPIFFE/SPIRE, OAuth2/OIDC).
• Strict commitment to Infrastructure as Code (IaC) principles (e.g., Terraform) and automated, verifiable CI/CD pipelines as fundamental engineering baselines.
• Fluent English language skills (good German skills are a plus) for effective collaboration in an international engineering environment.