DevOps Engineer

Project overview

Please note! This request is not intended for freelancers. DevOps Engineer | Logius (36 hours per week) Assignment details Function: DevOps Engineer Number of positions: 2 FTE Hours: 36 hours per week Start date: December 1, 2026 End date: November 30, 2027 Option for extension: 2 times 6 months Location: The Hague (hybrid working possible) On-call duty: Yes About the assignment For the AMV (AppManager Provisioning) team at Logius, we are looking for two experienced DevOps Engineers. In this role, you combine operational management, infrastructure knowledge, and software development.

You will work on the management, further development, and availability of business-critical applications within multiple Kubernetes environments. The assignment originates from AV507568- DevOps Engineer. You are responsible for both development and operations and work closely with DevOps Engineers, architects, and testers. You will actively contribute to the development of API management services and ensure that applications run stably, securely, and future-proof.

Background of the assignment Logius has been asked to take over the AppManager Provisioning (AMV) for Mijn Betaaloverzicht, a service that provides citizens with secure insight into their payment obligations with various government agencies, such as DUO, UWV, and CJIB. The AMV functions as a certificate-issuing service where DigiD authentication is translated into cryptographically validated certificates. Key data is stored in an HSM (Hardware Security Module).

An initial version of the software is being developed by CJIB and will subsequently be taken over and further developed by Logius within the Logius Private Cloud. Production launch is scheduled for 2027. Work activities -Manage, optimize, and further develop applications within Kubernetes platforms. -Develop and maintain API management services. -Automate processes and implement CI/CD solutions. -Write workflows and resolve production incidents. -Collaborate within multidisciplinary Agile/SAFe teams. -Contribute to improvements within development and management processes.

-Work according to DevOps principles where development and operations converge. -Advise on technical improvements and innovations within the platform. Requirements The candidate possesses: -Minimum HBO work and thinking level. -Minimum 3 years of experience with Kubernetes. -Minimum 3 years of experience with GO (Golang). -Experience with Kubernetes in production environments. -Experience with Docker, Helm, and CI/CD pipelines (GitLab CI or comparable). -Experience with SAML and OAuth/OpenID Connect. -Knowledge of PKI and key management. -Experience working within a DevOps team.

-Experience with Agile and/or SAFe working. Wishes Preferably experience with: -SAFe Agile certifications. -DigiD connections or other eID integrations. -AVG (GDPR) issues related to processing BSN data. -DNS management within a government environment (DNSSEC, internet.nl standards, no-mail records). -Modern identity and API security standards such as: -OAuth 2.0 -OpenID Connect -JOSE (JWT/JWS/JWE) -mTLS -PKIoverheid -OpenID4VCI -OpenID4VP -Verifiable Credentials -DPoP -Wallet ecosystems -Monitoring solutions such as Prometheus and Grafana. -HSMs and advanced key management.

Competencies We are looking for a candidate who possesses: -Strong analytical skills. -High learning ability and growth mindset. -Team orientation and good collaboration skills. -Affinity with security and digital identities. -Proactive attitude and ownership. -Didactic skills. -Ability to solve complex issues independently. About Logius Logius works towards a government that is digitally accessible anytime, anywhere, and for everyone. From this societal mission, Logius develops and manages essential digital services for citizens, businesses, and governments.

Within this innovative environment, you will have ample room for personal initiative, development, and suggesting improvements. Important You will participate in an on-call service according to a rotation schedule within the team. Suppliers must take this into account when offering their rate (all-inclusive). Are you an experienced DevOps Engineer with knowledge of Kubernetes, GO, and modern identity and security solutions, and do you want to make a direct contribution to the digital services of the Dutch government? Then we would like to receive your response.

Additional information When you offer a professional to us as a supplier and they are placed, we will need information from you as a contracting party, including regarding the Chain Liability (Registration) Act (Wet keten- en inlenersaansprakelijkheid). The purpose of the 'WKA' is to prevent abuse in the remittance of payroll taxes at all links in the chain; from supplier to client. We cover these risks for our clients by means of a blocked account, the G-account. This is an account to which a portion of the invoice amount is deposited and from which you can pay payroll taxes and VAT to the Tax Authorities.

The percentage to be deposited depends on whether you have a SNA certification (NEN-4400-1 or NEN-4400-2) or not, and whether your company is established in the Netherlands or abroad. You can apply for the G-account from the Tax Authorities. If you cannot obtain a G-account (and you can provide proof of this from the Tax Authorities), you also have the option to provide an accountant's statement (assurance report regarding personnel lending) every quarter. In this, a certified accountant (AA or RA) will issue a statement about the accuracy, completeness, and timeliness of the remittances.

Please note that the costs for this statement are at your own expense.

Project details

• Start: 2026-11-30T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch