About the position In this role, you will take on technical responsibility for developing, adapting and hardening Talos Linux as an immutable operating system in a safety-critical cloud and infrastructure environment. A central focus is on implementing secure boot mechanisms, building a TPM-based chain of trust and ensuring system integrity through modern measure boot concepts. You are also responsible for configuring and optimizing the PXE/IPXE boot process for automated provisioning of nodes. They develop and expand TALOS-specific components to meet the specific requirements of the target environment — for example in the area of GPU integration, storage connectivity and hardware-specific optimization. In addition, ensure that the operating system can be hardened and operated securely in accordance with relevant CIS and BSI requirements. They work independently on complex technical issues, actively shape architectural and implementation decisions and ensure that the developed systems are stable, interoperable, automatable and securely put into operation. Your tasks Development, adaptation and optimization of Talos Linux as an immutable operating system Implementing Secure Boot, UEFI, TPM 2.0, and Measured Boot Establishing and securing a continuous chain of trust to ensure system integrity Configure and optimize PXE/IPXe-based provisioning processes Development of Talos extensions, particularly for special hardware requirements such as GPU and storage Customization and hardening of Linux kernel components, modules, and security mechanisms Integration and optimization of containerd and other container technologies Automate fog node provisioning and OS configuration Implementation of CIS and BSI-compliant hardening measures Technical management and active participation in OS provisioning and platform projects Must-Have Skills At least 2 years of practical experience with Secure Boot, UEFI, TPM 2.0, Measured Boot and building technical chains of trust At least 2 years of experience with Pxe/iPXE for automated OS deployment At least 3 years of very good Go skills, ideally for developing Talos extensions At least 2 years of experience in Linux kernel engineering, particularly with modules, security and kernel hardening At least 2 years of practical experience using containerd and container technologies At least 3 years of very good shell scripting skills At least 2 years of experience in hardening operating systems according to CIS and BSI requirements At least 2 years of experience with automated fog node provisioning and OS configuration Demonstrable experience in developing and customizing Talos Linux for specialized hardware, such as GPU or storage Ability to independently implement complex secure boot and TPM concepts Experience in leading or actively participating in OS provisioning projects Safe handling of compliance and security requirements in the OS and cloud environment What we offer Flexible work organization: Benefit from great flexibility with the option to work remotely up to 95%, as well as flexible working hours for an optimal work-life balance. Exciting projects & technologies: Work on innovative cloud solutions and cutting-edge delivery pipelines with cutting-edge technologies. Development & continuing education: We invest in your future with a wide range of continuing education opportunities, training and clear career paths within a globally active group. Dynamic team: Become part of an agile and supportive team that is characterized by commitment, team spirit, and a willingness to take on challenges. Attractive overall package: competitive compensation, comprehensive social benefits and additional employee offers. Safe working environment: The stability of a large company with long-term prospects. About T-Systems International GmbH At T-Systems, we offer our business customers the right system solutions for their digital business. With our portfolio, we ensure that digital transformation reduces complexity, saves costs and makes everyday work easier. Our focus is on connectivity, digital, cloud & infrastructure as well as security - Let's power higher performance! Is this job made for you? Then take advantage of this opportunity! Please apply online. Severely disabled people are given priority if they are equally qualified. We are looking forward to seeing you! Your application for job advertisements outside Deutsche Telekom AG can also be processed outside Deutsche Telekom AG in other European countries. This also applies to the processing of applications for subsidiaries of Deutsche Telekom AG. For our civil servants, therefore, the following note: You are not required to attach documents relevant to personnel records, in particular civil service assessments, with your application. However, you are free to provide these documents voluntarily.
Job Benefits
Work-Life Balance
- Remote work options (up to 95%)
- Flexible working hours
Professional Development
- Continuing education opportunities and training
- Clear career paths
Financial
- Competitive compensation
- Comprehensive social benefits
- Additional employee offers
