I would probably use 'verkompliziert' or even 'kuenstlich verkompliziert' when emphasizing the active role of the responsible person/group. But the english term is good - short, a bit more specific. It is used as a 'Lehnwort' quite often even in german-speaking tech environments.

That is missing the passive-aggressiveness of "overengineered"... which is probably fine.