Your IT Future, Delivered
Principal Infrastructure Engineer.
With a global team of around 5600 IT experts, DHL IT Services connects people and keeps the world economy running by continuously developing innovations and creating sustainable digital solutions. We work across global boundaries and push limits in all dimensions of logistics. You can leave your mark and help shape the technological backbone of the world’s largest logistics company.
Digitalization. Simply delivered.
In the P&P Strategy & Enabling Services area, we develop applications for business customers. Reliability, performance, and unique, user-friendly experiences are especially important to us. Our applications cover services such as letter announcements, automated personalized print mailings, and letter tracking.
#DHL #DHLITServices
Role Overview
As Principal Infrastructure Engineer, you are responsible for leading a team of Cloud Platform Engineers and driving the design, build, and operation of a secure, scalable, and reliable Cloud Platform. You combine strong technical expertise with people leadership to enable product and development teams through standardized, automated, and compliant cloud services.
You act as a technical role model, coach your team, and collaborate closely with architecture, security, DevOps, and application teams.
Grow together
We rely on DevOps and work closely with application, product, and DevOps teams as an enabler. Our way of working is shaped by agile methods in interdisciplinary teams. We remain curious and open to new technologies and best practices, placing high value on continuous learning.
What You Can Achieve with Us:
- Opportunity to own architectural strategy for mission‑critical systems.
- A dynamic and innovative engineering environment.
- Professional development opportunities, including certifications and training.
- Collaborative culture with strong emphasis on continuous improvement.
- Translate business and non-functional requirements into platform capabilities, while continuously developing yourself and leading your own engineering team.
- Contribute to adherence to our methodological (agile) guidelines. Together with the team, you will develop delivery plans and ensure their implementation.
- Support stakeholders in planning and implementing their backlog, keeping the product roadmap in view together with the Product Owner.
- Actively support the team in removing obstacles.
- Analyze existing operational standards, processes, and governance to identify and implement improvements.
Ready to embark on the journey?
What You Should Bring:
- 5+ years experience in the ecosystem of Cloud Native Computing Foundation (CNCF)
- 5+ years experience in cloud platform engineering or SRE roles
- Expert-level Terraform — modular architecture, Terraform Cloud, state management, provider development
- Deep Azure knowledge — AKS, Key Vault, Storage, PostgreSQL, Networking, RBAC, Service Principals
- Kubernetes expertise — Helm, operators, policy engines (Kyverno/OPA), ingress controllers, secrets management
- Observability stack — Grafana, Prometheus, Mimir, Tempo, OpenTelemetry, or equivalent distributed tracing/metrics systems
- CI/CD — GitHub Actions (writing custom actions and reusable workflows), container registries, GitOps
- Git & Version Control: GitHub Enterprise, branching strategies, code review processes
- Networking: DNS, TCP/IP, firewalls, VPNs, ingress controllers
- Scripting & development — Shell scripting, Go, Python; Dockerfile authoring
- Security mindset — Container scanning, secret management, network segmentation, WAF
- Strong communication skills in cross-functional and international setups
- Strong understanding of multithreading, concurrency, and performance tuning
- Strong leadership presence and ability to motivate diverse engineering teams.
- Strong understanding of Agile, Scrum
- Strategic thinker with the ability to make informed technical decisions.
- Proactive problem-solver with a focus on outcomes and quality.
- Background working in large / global enterprise environments and multicultural teams.
- Familiarity with tools like Jira, Confluence.
- Strong stakeholder management and communication skills.
- Interest in taking responsibility for exciting and innovative projects that further digitalize Deutsche Post / DHL.
- Excellent communication skills, both verbal and written in English.
What would be nice you bring:
- Experience with Splunk or Sentry
- Knowledge of Terraform Cloud at enterprise scale
- Experience operating Mattermost or similar self-hosted platforms
- Familiarity with Telepresence for Kubernetes dev workflows
- Experience with Azure capacity reservations and cost optimization
- Azure certifications (AZ-900, AZ-104, AZ-305)
Key Responsibilities
Leadership & Stakeholder Management
- Lead, mentor, and develop a team of platform engineers, including goal setting, performance reviews, and skill development.
- Foster a collaborative culture focused on innovation, ownership, quality, and continuous improvement, considering working in global teams
- Prioritize workload, allocate tasks, and ensure high-quality and timely delivery.
Infrastructure as Code & Cloud Architecture
- Design, implement, and maintain Azure infrastructure using Terraform and Terraform Cloud
- Develop and maintain reusable Terraform modules (AKS, Key Vault, Storage Accounts, PostgreSQL Flexible Server, Log Analytics, VMs, Capacity Reservations, Diagnostic Settings, Delete Locks)
- Manage multi-environment deployments with proper state management and drift detection
- Operate and evolve infrastructure for the Observability Platform (O11y) and shared platform services (SDB)
Kubernetes & Container Platform
- Operate and maintain Azure Kubernetes Service (AKS) clusters
- Manage Helm-based deployments for platform components
- Implement and enforce cluster policies with Kyverno
- Operate ingress solutions (Ingress-NGINX, Traefik)
- Manage secrets with External Secrets Operator (ESO) and Azure Key Vault
- Ensure cluster resilience through backup/recovery with Velero
- Build and maintain container images and Docker build pipelines
Observability & Monitoring
- Operate the full observability stack: Grafana Enterprise, Grafana Mimir (metrics), Grafana Tempo (tracing), Prometheus, Splunk, Sentry (APM)
- Implement and manage OpenTelemetry collectors and pipelines
- Maintain observability-as-code practices (dashboards, alerting rules, IRM configuration via Terraform)
- Operate custom monitoring solutions (prometheus-redis-exporter, blackbox-exporter, security monitoring)
CI/CD & Automation
- Build and maintain GitHub Actions workflows and reusable actions
- Operate self-hosted GitHub Action Runners (infrastructure and application runners)
- Manage automated dependency updates with Renovate
- Maintain Docker image build and caching pipelines
Security & Compliance
- Operate container vulnerability scanning with Trivy and Twistlock
- Monitor and manage Azure Service Principals and their lifecycle
- Implement network security (WAF with Coraza, SOCKS proxies, SFTP exchange)
- Manage secrets lifecycle and rotation strategies
Collaboration & Platform Services
- Operate Mattermost as a self-hosted collaboration platform
- Maintain database infrastructure (PostgreSQL, Redis) including DBA tooling and pgAdmin
- Support disaster recovery processes and tooling
An array of benefits for you:
- Hybrid work arrangements to balance in-office collaboration and home flexibility.
- Annual Leave: 42 days off apart from Public / National Holidays.
- Medical Insurance: Self + Spouse + 2 children. An option to opt for Voluntary Parental Insurance (Parents / Parent -in-laws) at a nominal premium covering pre existing disease.
- In House training programs: professional and technical training certifications.
