Your IT Future, Delivered Principal Infrastructure Engineer. With a global team of around 5600 IT experts, DHL IT Services connects people and keeps the world economy running by continuously developing innovations and creating sustainable digital solutions. We work across global boundaries and push limits in all dimensions of logistics. You can leave your mark and help shape the technological backbone of the world’s largest logistics company.

Digitalization. Simply delivered. In the P&P Strategy & Enabling Services area, we develop applications for business customers. Reliability, performance, and unique, user-friendly experiences are especially important to us. Our applications cover services such as letter announcements, automated personalized print mailings, and letter tracking.

#DHL #DHLITServices

Role Overview As Principal Infrastructure Engineer , you are responsible for leading a team of Cloud Platform Engineers and driving the design, build, and operation of a secure, scalable, and reliable Cloud Platform. You combine strong technical expertise with people leadership to enable product and development teams through standardized, automated, and compliant cloud services.

You act as a technical role model, coach your team, and collaborate closely with architecture, security, DevOps, and application teams.

Grow together We rely on DevOps and work closely with application, product, and DevOps teams as an enabler. Our way of working is shaped by agile methods in interdisciplinary teams. We remain curious and open to new technologies and best practices, placing high value on continuous learning.

What You Can Achieve with Us:

• Opportunity to own architectural strategy for mission‑critical systems.
• A dynamic and innovative engineering environment.
• Professional development opportunities, including certifications and training.
• Collaborative culture with strong emphasis on continuous improvement.
• Translate business and non-functional requirements into platform capabilities, while continuously developing yourself and leading your own engineering team.
• Contribute to adherence to our methodological (agile) guidelines. Together with the team, you will develop delivery plans and ensure their implementation.

Ready to embark on the journey? What You Should Bring:

What would be nice you bring:

• Experience with Splunk or Sentry
• Knowledge of Terraform Cloud at enterprise scale
• Experience operating Mattermost or similar self-hosted platforms
• Familiarity with Telepresence for Kubernetes dev workflows
• Experience with Azure capacity reservations and cost optimization
• Azure certifications (AZ-900, AZ-104, AZ-305)

Key Responsibilities Leadership & Stakeholder Management

• Lead, mentor, and develop a team of platform engineers, including goal setting, performance reviews, and skill development.
• Foster a collaborative culture focused on innovation, ownership, quality, and continuous improvement, considering working in global teams
• Prioritize workload, allocate tasks, and ensure high-quality and timely delivery.

Infrastructure as Code & Cloud Architecture

• Design, implement, and maintain Azure infrastructure using Terraform and Terraform Cloud
• Develop and maintain reusable Terraform modules (AKS, Key Vault, Storage Accounts, PostgreSQL Flexible Server, Log Analytics, VMs, Capacity Reservations, Diagnostic Settings, Delete Locks)
• Manage multi-environment deployments with proper state management and drift detection
• Operate and evolve infrastructure for the Observability Platform (O11y) and shared platform services (SDB)

Kubernetes & Container Platform

• Operate and maintain Azure Kubernetes Service (AKS) clusters
• Manage Helm-based deployments for platform components
• Implement and enforce cluster policies with Kyverno
• Operate ingress solutions (Ingress-NGINX, Traefik)
• Manage secrets with External Secrets Operator (ESO) and Azure Key Vault
• Ensure cluster resilience through backup/recovery with Velero
• Build and maintain container images and Docker build pipelines

Observability & Monitoring

• Operate the full observability stack: Grafana Enterprise, Grafana Mimir (metrics), Grafana Tempo (tracing), Prometheus, Splunk, Sentry (APM)
• Implement and manage OpenTelemetry collectors and pipelines
• Maintain observability-as-code practices (dashboards, alerting rules, IRM configuration via Terraform)
• Operate custom monitoring solutions (prometheus-redis-exporter, blackbox-exporter, security monitoring)

CI/CD & Automation

• Build and maintain GitHub Actions workflows and reusable actions
• Operate self-hosted GitHub Action Runners (infrastructure and application runners)
• Manage automated dependency updates with Renovate
• Maintain Docker image build and caching pipelines

Security & Compliance

• Operate container vulnerability scanning with Trivy and Twistlock
• Monitor and manage Azure Service Principals and their lifecycle
• Implement network security (WAF with Coraza, SOCKS proxies, SFTP exchange)
• Manage secrets lifecycle and rotation strategies

Collaboration & Platform Services

• Operate Mattermost as a self-hosted collaboration platform
• Maintain database infrastructure (PostgreSQL, Redis) including DBA tooling and pgAdmin
• Support disaster recovery processes and tooling

An array of benefits for you:

• Hybrid work arrangements to balance in-office collaboration and home flexibility.
• Annual Leave: 42 days off apart from Public / National Holidays.
• Medical Insurance: Self + Spouse + 2 children. An option to opt for Voluntary Parental Insurance (Parents / Parent -in-laws) at a nominal premium covering pre existing disease.
• In House training programs: professional and technical training certifications.