Site Reliability Engineer

for a client based in Berlin we are looking for a freelancer Site Reliability Engineer (m/f/d) who can deploy and operate OIP in agency-controlled environments, ensuring availability, security, and compliance. Act as incident commander on-site, maintain GitOps workflows, and deliver documentation satisfying legal audits and inspections. Tasks:-Install and maintain Kubernetes clusters in agency data centers; configure GitOps pipelines (Argo CD/Flux) and artifact registries.-Implement observability stacks (Prometheus, Grafana, Loki, OpenTelemetry) with dashboards and alerting tailored to agency SLAs.-Lead incident response on-site, coordinating with agency IT/security, legal teams, and engineering; deliver post-incident reports.-Manage backups, DR plans, and court-mandated data retention/expungement processes.-Harden environments: network segmentation, mTLS, Keycloak/OPA policy enforcement, vulnerability remediation.-Produce audit evidence, runbooks, and compliance documentation (DPIA inputs, log excerpts, chain-of-custody for technical evidence).-Train agency administrators and analysts on operations, monitoring, and emergency procedures. Must-Haves: -Excellent skills with SRE/DevOps-Delivered services for regulated customers (public sector, finance, healthcare)-Worked directly with customer IT/security teams and handled compliance audits-Familiar with data privacy obligations, logging, and legal evidence standards-Kubernetes operations (on-prem/hybrid) with GitOps, Helm/Kustomize, and infrastructureautomation (Ansible, Terraform)-Observability tooling (Prometheus, Grafana, Loki, OpenTelemetry) and incident response practices-Security/compliance: IAM, secrets management, TLS/mTLS, SIEM integration, GDPR/DSGVO awareness-CI/CD and release management in restricted networks; offline artifact handling-Backup/DR tooling (Velero, Restic, snapshots) and retention policy enforcement-Strong scripting/automation (Bash, Python) for operational workflows Nice to Have-Knowledge of agency IT/governance structures-Certifications: CKAD/CKA, ISO 27001 Lead Implementer, CISSP, or GDPR practitioner-Experience integrating with IAM (SAML, LDAP), SIEM (Splunk/Elastic), and forensic logging systems-Background supporting digital evidence workflows or judicial proceedings Project language: EnglishProject start: asap and fulltimeProjectduration: 3 months + opportunity for an extensionLocation: 100% in Remote If you are interested in this project please feel free and send us your current CV in english and your hourly rate.