Principal DevOps Engineer

Conduit · Berlin, Germany · Remote-first · Full-time About ConduitConduit is a dental interoperability platform, part of the HeyDonto Labs family of companies. We connect the systems dental practices run on so clinical and operational data moves securely and reliably. Our platform handles protected health information every day, and we hold our infrastructure to the standard that deserves. About the roleAs Principal DevOps Engineer, you own the design, evolution and transformation of our cloud and platform architecture. You set the technical direction for our DevOps environments and make sure scalable, secure, high-performing systems are delivered across a multi-repo product landscape: from a single commit to a signed, digest-pinned release running in production. We run regulated healthcare workloads (HIPAA / PHI) on Google Cloud and are building to SOC 2 standards: GKE clusters reconciled by ArgoCD, Helm charts per environment, Terraform-managed infrastructure, and GitHub Actions pipelines that build, scan, sign and promote every release. You will own that path end to end and decide where it goes next. What you'll doLead the design and evolution of our DevOps and platform architectureOwn the architecture and operation of our cloud and container platform: GCP, GKE, Docker, Helm, ArgoCD, TerraformMake and document architecture decisions as ADRs, not tribal knowledgeEnsure the quality, performance, security and stability of production systems handling PHIBuild and evolve CI/CD in GitHub Actions, including full supply-chain chain of custody: Trivy gates, SBOM generation, cosign keyless signing and verification, digest pinning end to endOwn the GitOps promotion and rollback model: ArgoCD convergence, backup-then-migrate ordering, one-click rollbackLead modernization of existing systems, including our Cloud Run to GKE/GitOps cutover and decommissioning of legacy infrastructureKeep the platform aligned with HIPAA and SOC 2 requirements, working alongside our compliance toolingDesign for loud failures: a deploy gate that blocks silently is a defectWrite runbooks so the platform is operable by someone other than its authorMentor DevOps engineers and the wider engineering team, and contribute to technical planning and hiring What you bring10+ years in DevOps, Cloud or Platform EngineeringProven experience owning a production platform, not only contributing to oneExperience delivering in regulated or high-assurance environments, with healthcare strongly preferredDegree in computer science, electrical engineering, mathematics, physics, or equivalent experienceFluent English, spoken and written (C1 minimum); our team works in English every dayAble to work regular overlap hours with US Eastern Time (early afternoon to evening in Berlin) Healthcare and dental experience (strongly preferred)Hands-on experience running infrastructure that stores or processes PHI under HIPAAFamiliarity with healthcare data standards and integrations (HL7, FHIR, EHR or practice management systems)Dental technology experience is a significant plusExperience supporting SOC 2 audits and evidence collection from the infrastructure side Technical skillsGCP depth (or deep AWS/Azure with a track record of going deep on a new cloud)Production Kubernetes, ideally GKE: Workload Identity, private clusters, autoscaling node pools, release channels, PodDisruptionBudgets, namespace and RBAC designArgoCD and GitOps in practice: app-of-apps, AppProjects, sync waves, PreSync hooks, drift detectionTerraform: modules, workspaces, remote state, state migrations, tflint, cost awarenessHelm chart authoring with environment-scoped values and encrypted secrets (SOPS + Cloud KMS)GitHub Actions: reusable and composite workflows, OIDC / Workload Identity Federation, SHA-pinned actions, branch rulesetsSupply-chain security: Trivy / OSV, SBOM (SPDX), Sigstore / cosign, gitleaks, pre-commit, CodeQLMicroservices and API-based architecturesIngress and connectivity: Traefik, external-dns, cert-manager, VPC/NAT, private service access, TailscaleObservability: Prometheus / Grafana, Cloud Monitoring, actionable alertingDatabases in the deploy path: Cloud SQL Postgres, expand/contract migrations, backup-gated releases Preferred certificationsCKA and/or CKADGoogle Cloud Professional Cloud DevOps EngineerHashiCorp Terraform AssociateAWS DevOps Engineer Professional or Microsoft DevOps Engineer Expert (nice to have) What we offerHighly competitive compensation, based on experienceA platform you genuinely own, with architecture decisions that are yours to make and write downA distributed, multicultural team across Europe, the Americas and the Middle East, working in EnglishReal product velocity: every merge to main ships to staging within minutesAn engineering culture built on ADRs, runbooks and reviewed changesFlexible hours and remote-first work, with a shared daily overlap window across Berlin and US Eastern TimeFunded certifications (CKA/CKAD, GCP, Terraform) plus conference and training budgetDirect impact on healthcare infrastructure that dental clinicians rely on every day