gh0stcloud is the sovereign cloud platform of gh0stservice GmbH in Cologne: Kubernetes, GitOps and open source on infrastructure in Germany, without AWS, Azure or Google Cloud. The platform is in production and has paying customers. Alongside it, we advise public-sector bodies and companies that build sovereign platforms of their own. We are looking for someone to run gh0stcloud reliably, develop it securely and carry that knowledge into customer projects.

Consulting carries part of the company and is also the quickest way to gain experience from many environments and to build a network of your own. Quality comes first: changes go through Git, are tested and accepted on a development environment before they reach production. We use AI tools deliberately and within clear limits.

This role needs very good German. The full posting is also available in German.

What you will do

Operating and developing gh0stcloud (about 50 %)

You run our Kubernetes clusters and develop them further, including upgrades, monitoring, alerting and capacity planning.
You own the GitOps workflow with Flux and Helm and roll out customer workloads safely.
You harden the platform in independent layers: network rules with Cilium, admission with Kyverno, RBAC and secrets in OpenBao.
You look after platform services such as database operators (CloudNativePG, MariaDB), External Secrets, ingress with Envoy, and backups with Longhorn and Velero.
You automate recurring work with OpenTofu and Terragrunt and improve runbooks, documentation and incident processes.
You take a fairly shared part of the paid on-call rotation.

Consulting (about 50 %)

You work on customer projects: architecture workshops, platform builds, operating concepts.
You translate security and sovereignty requirements (BSI IT-Grundschutz, C5 or the VS-NfD context, for example) into concrete technical solutions.
You support customer teams through onboarding and pass on your operations knowledge in training sessions.

What you bring

Several years of operating Linux and container infrastructure, at least two of them with Kubernetes in production
Confidence with Helm, GitOps (Flux or Argo CD), OpenTofu or Terraform, and CI/CD
Experience with observability (Prometheus, Grafana, Loki or similar) and networking fundamentals (DNS, TLS, load balancing)
A security mindset: least privilege, defence in depth, careful handling of secrets
Scripting or programming skills (Bash, Python or Go)
You enjoy talking to customers and can explain technology clearly
Very good German (at least C1) and good English
Willingness to work on site with customers (about 2 to 4 days a month) and to undergo a security clearance (Ü2) for projects in the defence sector

Nice to have: CKA or CKS, experience in the public or defence sector, self-hosting out of conviction (in your own homelab, for example), knowledge of OpenStack, Ceph or bare-metal operations.

What we offer

€60,000 to €72,000 a year
You can share in the success of your consulting projects. We discuss the details in person.
Paid on-call duty
Remote-first within Germany, headquarters in Cologne
A powerful laptop from day one, also for private use
€50 a month in non-cash benefits and an internet allowance
Company pension with an employer contribution, a health budget and a JobRad bike lease
28 days of holiday
€2,000 training budget a year, for CKA or CKS for example
Real responsibility from day one, and projects that matter for digital sovereignty in Europe

How to apply

Send your CV and a few sentences on why this role interests you to jobs@gh0stservice.com. Links to GitHub, GitLab or your own projects are welcome.

We welcome applications regardless of gender, origin, age, religion, disability or sexual identity.