IT Solution Architect - CheckMK / Grafana / BSI (hybrid remote and onsite in Berlin)

Project overview

For our client from the public or regulated sector, we are looking for an experienced (Senior) IT Solution Architect for Enterprise Monitoring. The goal of the project is the conception, migration, and geo-redundant setup of a central, highly available monitoring platform according to BSI IT-Grundschutz. You will consolidate existing monitoring tools, establish CheckMK Enterprise, InfluxDB, and Grafana as the standard solution, and automate the infrastructure end-to-end via Ansible before the platform is formally handed over to operations.

Project Framework Data:

• Start/Duration: 01.01.2027 for 6 months (with extension option) full-time (40h/week)
• Hybrid work model: Monday+Friday remote and Tuesday/Wednesday/Thursday onsite in Berlin (possibly individual appointments in Bonn by arrangement)
• A security check will be initiated at the start of the project.

Responsibilities

• Requirements Management & Solution Design: Recording, security assessment, and translation of complex requirements into target architectures, work packages, and acceptance criteria.
• Architecture & Migration: Conception, setup, and migration of a geo-redundant, highly available CheckMK Enterprise and Grafana infrastructure (Distributed Monitoring, Remote Sites, Cutover & Rollback Concepts).
• Data & Visualization Management: Integration of InfluxDB for long-term metrics and retention management; setup of enterprise dashboards, datasources, and alerting workflows in Grafana.
• Interface Integration: Connection to CMDB, ITSM systems, LDAP/Active Directory, SSO, and notification systems, including complete interface documentation.
• Automation: End-to-end provisioning and configuration via Ansible (Playbooks, Roles, IaC/CaC) and Git CI/CD.
• Security & BSI IT-Grundschutz: Implementation of hardening measures, IAM/RBAC, TLS/PKI, logging, and creation of audit-proof BSI evidence documentation.
• Testing & Enablement: Execution of failover, load, and disaster recovery tests, creation of runbooks/manuals, and conducting structured workshops for operational handover.

Requirements

• Must-have: Several years of practical experience in the conception, architecture, and migration of CheckMK Enterprise Edition (Distributed Monitoring, HA, Rulesets, APIs).
• Must-have: Sound enterprise experience with Grafana (HA/Failover Concepts, Provisioning, Alerting, API).
• Must-have: Practical experience in the design and operation of InfluxDB (Retention Policies, Capacity Planning, Flux/InfluxQL).
• Must-have: Excellent automation skills with Ansible (Playbooks, Roles, IaC) and Linux system administration (Debian/Ubuntu/RHEL).
• Must-have: Sound knowledge and practical implementation experience in BSI IT-Grundschutz and Security Hardening (TLS, RBAC, IAM).
• Must-have: Demonstrable reference projects for all core areas mentioned above.
• Nice-to-have: Experience with Prometheus, OpenMetrics, or Grafana Loki.
• Nice-to-have: Knowledge of container technologies (Docker, Podman, Kubernetes).
• Nice-to-have: ITIL certification or experience with ITSM operational handovers.

Project details

• Start: 2027-01
• Duration: 6 Monate
• Remote: hybrid
• Location: Berlin, Deutschland, DE
• Languages: German