Key Responsibilities
- Design, implement, and manage secure and scalable infrastructure on both cloud platforms (AWS/Azure) and on-premise virtualization environments (Hyper-V, ESXi, Proxmox VE, etc.).
- Experience on implementation with Infrastructure as Code (IaC) tools, especially Terraform
- Set up and maintain middleware such as NGINX and ATS.
- Implement observability (o11y) stacks such as Grafana Stack.
- Deploy and manage Kubernetes clusters including k3s, k0s, and managed services like AWS EKS.
- Provision and manage databases including AWS RDS, PostgreSQL, MySQL, Oracle, and Microsoft SQL Server.
- Administer and secure on-premise server infrastructure, including hypervisor management, patching, and performance tuning.
- Collaborate with development and operations teams to troubleshoot and resolve infrastructure and security-related issues.
- Monitor systems for security threats, respond to incidents, and conduct postmortem analysis.
- Manage and enforce access control policies across various systems and platforms.
- Champion and integrate security best practices (shifting left) into the software development lifecycle, from code to deployment.
- Develop, maintain, and optimize our CI/CD pipelines, with a primary focus on GitLab CI, to ensure rapid, reliable, and secure software delivery.
- Automate security testing, vulnerability scanning, and compliance checks within the deployment process.
- Stay current with emerging security threats, technologies, and industry best practices.
Technical Expertise & Experience
- Proven experience as a DevOps, Site Reliability, or Systems Engineer with a strong focus on security.
- Hands-on experience managing cloud environments in either AWS or Azure (e.g., IAM, VPC, Security Groups, EC2, S3, Azure AD, NSGs).
- Solid experience in on-premise server administration and virtualization using platforms like Hyper-V, VMware ESXi, or Proxmox VE.
- Demonstrable experience with CI/CD concepts and tools, particularly GitLab CI.
- Familiarity with security tools for static/dynamic analysis (SAST/DAST), container scanning, and dependency checking.
- Strong understanding of networking principles, firewalls, and secure network design.
Technical Core
- A background in software development, particularly with Java, is a significant plus.
- Knowledge of containerization and orchestration technologies (Docker, Kubernetes).
- Experience with scripting languages (e.g., Python, Bash, PowerShell) for automation.
- Cloud certifications (e.g., AWS Certified Solutions Architect, Azure Administrator Associate).
