Infrastructure/Platform Engineer
We are looking for an Infrastructure/Platform Engineer to join our team and help us maintain, secure, and continuously improve our self-hosted infrastructure platform.
Requirements
— 2+ years of professional experience in Infrastructure / Platform Engineering, DevOps, System Administration, or a similar role;
— Strong Linux administration skills, preferably Debian, with confidence working from the CLI;
— Solid experience with Windows Server administration;
— Hands-on experience with Ansible, including playbooks, roles, and inventories;
— Experience with an Ansible orchestration layer such as Semaphore;
— Practical experience with Docker and container operations, including image lifecycle, registries, networking, and Docker Compose-based stacks;
— Good understanding of networking and security fundamentals, including iptables/UFW, Windows Firewall, WireGuard, reverse proxies, and TLS/certificate management (ACME);
— Experience with database operations, preferably MariaDB/Galera clusters and/or Microsoft SQL Server, including backups, log shipping, maintenance, and patching;
— Experience with monitoring and logging, such as Prometheus, Grafana, Alertmanager, and Loki or similar solutions;
— Strong understanding of Git-based workflows and infrastructure changes managed through version control and pipelines;
— Security-minded approach and understanding of secure production practices;
— English — B2 or higher, with good written and spoken communication skills.
Would Be a Plus
— Experience with VMware, VMware Cloud Director, or NSX, or willingness to learn;
— Experience with Azure hybrid services, including Azure Arc, Managed Instance, or Blob Storage for offsite backups;
— Experience with SSO/IAM solutions, such as Authentik, OIDC/SAML, and secrets management;
— Scripting experience with Python and/or PowerShell;
— Familiarity with NIS2/GDPR operational requirements, including incident reporting, audit trails, and data classification;
— Experience with distributed systems and clustered infrastructure.
About project
An online portal for mobile virtual network operators and providers of TV and internet services, that helps regular and business customers manage mobile numbers and control expenses, to block, resume, change or buy subscriptions, renew contracts, and activate SIM cards.
Responsibilities
— Infrastructure Operations: Maintain and support approximately 20 Linux and Windows hosts across PROD, STAG, TEST, and DEV environments;
— Security & CVE Management: Monitor, triage, and remediate vulnerabilities across OS packages, container images, and third-party applications;
— Vulnerability Management: Operate and maintain security tooling, including Harbor/Trivy for container scanning, Renovate for automated dependency updates, and Wazuh SCA/FIM for security and compliance findings;
— Patch Management: Plan and execute patch cycles safely using a test → staging → production approach, including kernel updates, database hosts, and clustered services;
— Infrastructure Automation: Develop and maintain Ansible playbooks, roles, inventories, and automated infrastructure workflows;
— Container Operations: Manage Docker-based infrastructure, including images, registries, networking, and Compose-based services;
— Networking & Security: Maintain firewalls, VPNs, reverse proxies, TLS certificates, and other core networking components;
— Database Operations: Support database infrastructure, including backups, replication/log shipping, maintenance, and patching;
— Monitoring & Logging: Maintain monitoring, alerting, and centralized logging using Prometheus, Grafana, Alertmanager, Loki, or similar tools;
— Documentation & Compliance: Keep infrastructure changes, patching evidence, operational decisions, and runbooks up to date in line with NIS2 and GDPR requirements;
— Reliability & Incident Management: Troubleshoot incidents, identify root causes, improve system reliability, and continuously automate and improve infrastructure processes;
— Cross-functional Collaboration: Work closely with the Infrastructure Lead and other technical specialists to maintain and improve the platform.
HR Contacts
HR