Senior Data Platform Engineer — Diegem, Belgium

h3Opportunity /h3pbHybrid (2 days on-site)
· Permanent, full-time /bAbout the roleThe data stack you own runs on warships and in air-gapped ops centres. When ILIAS Solutions cannot be in the room,byour Helm charts, runbooks and Spark jobs /b are what keeps it running, across 10+ customer sites, some physically unreachable, where what you deploy must continue to function for years.
This is not a build-and-hand-off role. You will sustain, evolve and set the engineering standard for a data runtime covering Spark on Kubernetes, Delta Lake on MinIO, and PostgreSQL, feeding dashboards, analytical notebooks and a GenAI assistant, while ensuring every component can be installed and operated by customer staff without your presence. /pbr/h3Your Mission /h3pWhat you'll do /pulliOwn the full data runtime in production: deploy, configure, monitor and upgrade Spark (Operator or spark-submit), Delta Lake on MinIO, and PostgreSQL on Kubernetes, including backup and restore, health monitoring and executor-level diagnosis across sites you may never be able to log into. /liliBuild and operate Spark processing jobs end-to-end with Analytics Engineers, from schema design through driver and executor-level diagnosis, and maintain Delta Lake hygiene: schema evolution, compaction, vacuum and small-file control. /liliDesign and steward PostgreSQL for analytical and serving workloads: schema design, performance tuning, migration strategy, autovacuum and memory configuration, and tested restores using pgBackRest or Barman. /liliDeliver backend services in Python and Java that feed dashboards, analytical notebooks and the GenAI assistant, with integration tests against real PostgreSQL and MinIO and reproducible local environments. /liliPackage and publish the full data stack as Helm charts and signed offline bundles, installable by customer staff without ILIAS present, and lead the migration of data services from Docker Swarm to RKE2. /liliRaise the chapter's capability floor: write runbooks and health checks that function on unreachable sites, set the standard for stateful service deployment and observability, and mentor engineers without becoming a single point of failure. /li /ulpWhat success looks likeThe data runtime runs reliably at customer sites with no dependency on your physical presence, runbooks are clear enough for customer staff to act, and health checks surface issues before they become incidents. The Docker Swarm to RKE2 migration is complete, tested and documented, and the offline bundle process is reproducible and signed. As your ownership grows, the chapter has a shared standard for stateful service deployment and observability that outlasts any single engineer. /ph3What you bring /h3ulliProduction operation of Spark on Kubernetes: Operator or spark-submit, driver and executor pod templates, S3A and Delta Lake jar configuration, dynamic allocation, executor sizing, shuffle and spill management, MinIO committers, and Prometheus/JMX monitoring; this is the primary filter for this role. /liliOperator-managed PostgreSQL with DBA-adjacent depth: CloudNativePG, Zalando or Crunchy; autovacuum and memory tuning; TimescaleDB and PostGIS; pgBackRest or Barman restores; postgres_exporter monitoring. /liliProduction operation of MinIO in distributed mode: erasure coding, bucket policies, OIDC via Keycloak, and Prometheus metrics. /liliKubernetes at the application layer: operators, Helm, GitOps (Argo CD or Flux), offline packaging, storage (Longhorn or Rook), NetworkPolicies and RBAC; cluster administration is not required. /lili6+ years of backend engineering in production, 3+ on data-intensive systems; Python at senior level, SQL at expert level, Java at working level; Git at expert level. /liliEligibility to obtain and maintain the required national orbNATO security clearance /b for this roleb(we support candidates through the clearance process) /b. /li /ulpIf you meet most of the requirements above, we encourage you to apply. The security clearance eligibility requirement is not flexible. /ph3Nice to have /h3ulliKafka producers and consumers with schema management; Airflow or comparable orchestration; Scala sufficient to read Spark source and stack traces. /liliAir-gapped delivery with Zarf or signed offline bundles; STIG-hardened hosts and FIPS-mode library knowledge; Docker Swarm migration experience; remote shuffle services and shuffle-heavy job tuning. /li /ulh3Also valued, and not required /h3ulliJupyterHub, MLflow or vLLM model serving; Go for operators or CLI tooling; Ansible or Terraform; Iceberg or Hudi lakehouse formats. /liliExperience in defence or another regulated industry; professional working proficiency in Dutch or French. /li /ulbr/h3Build Your Future with ILIAS /h3pWhy ILIAS SolutionsILIAS Solutions is part of the Patria Group and builds software that defence organisations use to sustain operational readiness. The constraints are hard: air-gapped environments, long-lived deployments, hardware you cannot alw