ppSchwarz Digits creates the technological foundation for digital sovereignty in Europe. As the IT and digital division of the Schwarz Group, we develop and manage the IT infrastructures for the retail divisions Lidl and Kaufland, as well as Schwarz Production and PreZero. At the same time, we operate as an independent provider in the external market to support companies across Europe in their digital transformation. We bundle our core services in the areas of Cloud, Cyber Security, Data AI, Communication, and Workspace. /p h3Your Tasks /h3 ul liYou design and develop our Key Management Service, focusing on secure key generation, lifecycle management (Key Rotation), and high-performance cryptographic operations. /li liYou implement and optimize complex data flows like Envelope Encryption, managing the relationship between Data Encryption Keys (DEKs) and Key Encryption Keys (KEKs) to provide multi-layered security. /li liYou develop Kubernetes operators to automate the entire lifecycle of the KMS and Secrets Manager, ensuring the service is self-healing, scalable, and easy to configure. /li liYou build and maintain robust REST APIs that allow customers to programmatically manage Key Rings, import external keys, and execute signing/verification workflows. /li liYou take ownership in an "You Build It - You Run It" environment,



acting as the bridge between security engineering and SRE. /li liYou ensure that every cryptographic operation adheres to industry standards (AES, RSA, ECDSA, HMAC) and provides the necessary audit trails for sovereign cloud requirements. /li /ul h3Your Profile /h3 ul liYou have a deep enthusiasm for Software Engineering, Applied Cryptography, and Cloud‑Native security. /li liYou actively own the entire software development lifecycle; go and k8s are your bread and butter—K8s operators are preferably a core part of your engineering toolkit. /li liYou are familiar with—or eager to master—cryptographic algorithms (AES‑GCM, RSA‑OAEP, ECDSA) and understand the logic behind secure key wrapping and transport. /li liYou understand that "sovereign" means more than just a location; you understand the auditing and compliance needs of managing secrets in a high‑stakes cloud environment. /li liYou don't just look at code; you understand how data flows through a system, identifying potential bottlenecks in API body sizes or cryptographic overhead to ensure cost‑efficiency and performance. /li liYou enjoy discovering new security standards and are excited about sharing your knowledge with the team. /li /ul bWe look forward to receiving your application. /b /p #J-18808-Ljbffr

📌 STACKIT Platform Services - Secrets Manager & KMS - Software Engineer (m/f/d) (Barcelona)
🏢 Schwarz Digits
📍 Barcelona