DevOps Engineer

We are looking for a DevOps Engineer to join ndd's Software Engineering team in Zurich. ndd develops cloud‑based services that make lung‑function testing widely accessible, aiming to improve the lives of millions affected by respiratory diseases. In this role you will design, develop, automate and maintain the company's cloud platform, ensuring it remains secure, scalable and compliant across the entire digital ecosystem. Your daily work will revolve around building and sustaining CI/CD and GitOps pipelines with Azure DevOps and Argo CD, monitoring platform health through logging, alerting and observability tools, and handling releases that include bug fixes, vulnerability remediation and upgrades. You will also manage the lifecycle of container images, perform hardening and security scans, and work closely with Cloud Operations on networking, access controls, backups and overall security posture. Troubleshooting, root‑cause analysis and third‑level production support form part of the routine, as does contributing to automation and continuous‑improvement initiatives. The position requires a bachelor's or master's degree in computer science, software engineering, medical engineering or a comparable field. You must have at least two years of hands‑on experience with DevOps and CI/CD (preferably Azure DevOps), GitOps tools (preferably Argo CD), Kubernetes and container technologies, infrastructure‑as‑code (preferably Terraform), and scripting/automation using PowerShell, Bash or Python. Experience with monitoring and observability stacks such as Grafana, OpenTelemetry or Azure Monitor, as well as container image security and vulnerability management, is also essential. Agile (Scrum) experience and fluent English communication are required. Additional experience that strengthens your profile includes at least one year working with Azure Kubernetes Service, Helm and service‑mesh solutions like Istio, cloud infrastructure and networking concepts, and cloud security controls such as RBAC, policy management and image hardening. Familiarity with authentication and authorization standards (OAuth2, OIDC, SSO) and Azure Entra ID, as well as security‑scanning tools (Trivy, Snyk, SonarQube) and public cloud platforms (Azure, AWS, GCP), is valuable. Knowledge of German and other languages is considered a plus. The role offers a prime Zurich location, competitive compensation, flexible hybrid working, comprehensive onboarding, modern technology and a supportive, inclusive team environment. What the role asks for: - Bachelor's or master's degree in CS, Software or Medical Engineering - 2+ years DevOps and CI/CD experience (Azure DevOps) - 2+ years GitOps tools experience (Argo CD) - 2+ years Kubernetes and container technology experience - 2+ years Infrastructure as Code experience (Terraform) - 2+ years scripting/automation (PowerShell, Bash, Python) - 2+ years monitoring and observability (Grafana, OpenTelemetry, Azure Monitor) - 2+ years container image security and vulnerability management - 2+ years Agile (Scrum) experience - Fluent English communication - 1+ year Azure Kubernetes Service (AKS) experience - 1+ year Helm and service‑mesh (Istio) experience - 1+ year cloud infrastructure and networking knowledge - 1+ year cloud security controls (RBAC, policy, image hardening) - 1+ year authentication/authorization (OAuth2, OIDC, SSO, Azure Entra ID) - (nice-to-have) Knowledge of German language - (nice-to-have) Experience with security‑scanning tools (Trivy, Snyk, SonarQube) - (nice-to-have) Experience with public cloud platforms (Azure, AWS, GCP)