German speaking IT Platform Engineer (Hybrid)

• Location: Hamburg, Germany (Hybrid: 2–3 days per week on-site)
• Employment Type: Full-time
• Compensation: €65,000 – €90,000 per year (commensurate with experience) + comprehensive benefits package
• Experience Required: 3+ years
• Language Requirements: German (B2+ required) & English (Proficient)

About Us & Our Mission

We are a non-profit health-tech organization at the forefront of digital healthcare innovation. Our core mission is to make advanced Artificial Intelligence practical and accessible across the medical field—reducing the burden on clinical staff while directly elevating patient care. By engineering localized, sovereign technology solutions, we strengthen the independence and resilience of healthcare infrastructure.

We are seeking an experienced IT Platform Engineer to assume end-to-end ownership of our internal platform, cloud infrastructure, and security compliance framework within an agile, high-impact organization.

Role Overview

In this role, you will architect, maintain, and refine our core internal platforms, identity and access controls, collaborative toolchains (GitHub, GitLab, Jira, Confluence, M365), and overarching security infrastructure. You will play a pivotal role in establishing ISO 27001 and BSI C5 compliance standards while managing a modern, greenfield platform built on Docker, Kubernetes, Terraform, and sovereign cloud environments (e.g., STACKIT, clinical data centers).

This position offers a transparent career progression path toward IT Security / Compliance Lead, working in close partnership with executive leadership (CTO).

Key Responsibilities

Platform Administration & Operations

• Manage, tune, and scale Microsoft Entra ID / Azure AD environments (encompassing SSO, Conditional Access, MFA, and licensing).
• Configure, integrate, and maintain internal developer and collaboration tools, including Jira, Confluence, GitHub, GitLab, and Microsoft 365.
• Deploy and support infrastructure components across clinical data centers and German cloud providers utilizing Docker, Kubernetes, Helm, Terraform, GitLab CI, and GPU servers.
• Act as the primary technical contact for internal platform support, user administration, and system configurations.

Identity & Access Management (IAM) & Compliance

• Architect, implement, and document robust RBAC, SAML, OIDC, and SCIM integrations.
• Build and lead BSI C5 and ISO 27001 compliance frameworks from the ground up, driving ISMS design, audit readiness, and alignment with ISO 13485 standards.
• Maintain audit-proof, structured documentation to guarantee an exceptionally secure enterprise environment.

Automation & Operational Efficiency

• Streamline user onboarding/offboarding workflows, license tracking, and security enforcement through scripting (PowerShell, Bash, Terraform, Ansible) and Infrastructure as Code (IaC).
• Oversee system telemetry, configure alerting frameworks, and conduct proactive troubleshooting to guarantee high availability.
• Handle IT vendor relationships, oversee SaaS licensing efficiency, and minimize operational overhead.

Requirements & Qualifications

Must-Haves

• Experience: At least 3 years of hands-on experience in IT administration, systems engineering, or platform operations.
• IAM Expertise: Deep familiarity with Microsoft Entra ID / Azure AD alongside standard IAM protocols (RBAC, SAML, OIDC, SCIM).
• Tooling: Demonstrated success administering M365, Jira, Confluence, and Git-based platforms (GitHub/GitLab).
• Security & Compliance: Proven track record in building, maintaining, or auditing ISO 27001 or BSI C5 compliance frameworks/ISMS.
• Languages: Working proficiency in German (B2+ spoken and written required) and fluent English skills.
• Location & Presence: Based in or willing to commute to Hamburg for a hybrid schedule (2–3 days/week on-site).

Nice-to-Haves

• Proficiency in IaC and automation tooling (PowerShell, Bash, Terraform, Ansible).
• Background working within regulated industries or healthcare ecosystems.
• Familiarity with MDM solutions, endpoint management, and telemetry stacks (Grafana, Prometheus, Azure Monitor).
• Core understanding of networking concepts (DNS, VPNs, Firewalls).
• Experience deploying and managing containerized applications (Docker, Kubernetes, Helm).

Core Competencies

• High Ownership: A proactive, self-starter mindset eager to take full accountability for core systems in an autonomous environment.
• Structured & Detail-Oriented: Thorough approach to system design, clear documentation, and pragmatic problem-solving.
• Service Mindset: Dedication to empowering colleagues and building reliable internal tools.

Why Join Us?

• Purpose-Driven Work: Drive tangible improvements in healthcare quality through sovereign, AI-assisted technology.
• Greenfield Architecture: Work with a contemporary tech stack free from legacy tech debt, backed by complete technical autonomy.
• Direct Growth Path: Clear trajectory into an IT Security / Compliance Lead role with high executive visibility (reporting alongside the CTO).
• Work-Life Balance: Flexible working schedules, predictable hybrid routines, and zero required travel or shift work.
• Stability & Culture: Flat hierarchies, collaborative teams, and long-term security in a well-capitalized non-profit structure.
• Perks & Benefits: Dedicated personal development budget, conference sponsorships, and modern office facilities in Hamburg.