Lead Site Reliability & Security

We are seeking a highly skilled and experienced Site Reliability Engineer (SRE) or DevOps professional to join our team. The ideal candidate will have a strong background in infrastructure and operating system management, security, automation, and cloud-native technologies. This role involves maintaining and enhancing system reliability, security, and performance across diverse environments, including Linux and Windows servers, container orchestration platforms, and web servers. You will work closely with development and security teams to ensure robust, scalable, and secure infrastructure that supports continuous delivery and operational excellence.

Key Responsibilities

Infrastructure & OS Management:
Perform kernel patching, security updates, and system hardening in line with industry best practices. Troubleshoot complex OS-level issues such as performance bottlenecks, memory leaks, I/O problems, and kernel panics. Manage and support Windows Server environments where applicable.

Security & Compliance:
Conduct regular security scans and vulnerability assessments using tools like Nessus, Qualys, or OpenVAS. Integrate static and dynamic application security testing (SAST/DAST) into CI/CD pipelines. Configure and maintain LDAP authentication for centralized access control. Ensure compliance with internal security policies and external regulatory standards. Implement and manage Web Application Firewall (WAF) configurations to protect against OWASP Top 10 threats.

Automation & Configuration Management:
Develop and maintain Ansible playbooks for automated provisioning, patching, and configuration management. Manage GitHub Enterprise repositories, including branching strategies and CI/CD workflows, preferably using GitHub Actions. Create automation scripts in Python, Shell, or Go to improve operational efficiency and reduce manual tasks.

Application & Web Server Management:
Configure and maintain Apache and Nginx web servers, including performance tuning, SSL/TLS management, reverse proxy setups, and load balancing. Troubleshoot web server logs and security issues to ensure high availability and reliability.

Container Orchestration & Cloud-Native Technologies:
Deploy, manage, and scale applications on Kubernetes clusters (EKS, AKS, or on-premises). Build and maintain secure Docker images with minimal attack surfaces. Monitor cluster health and resource utilization, implementing auto-scaling policies as needed.

Monitoring & Incident Management:
Deploy and maintain monitoring tools such as Prometheus, Grafana, Datadog, or the ELK stack. Define Service Level Indicators (SLIs), Service Level Objectives (SLOs), and error budgets. Lead blameless post-mortems and participate in on-call rotations to manage incident response effectively.

Required Qualifications

- Minimum of 8 years of experience in SRE, DevOps, or Systems Engineering roles.
- Proficiency with Infrastructure as Code (IaC) tools such as Terraform.
- Experience with service mesh technologies (Istio, Linkerd) and Container Network Interface (CNI) plugins like Calico or Cilium.
- Strong understanding of zero-trust networking principles and Single Sign-On (SSO) integrations.
- Expertise in Rocky Linux, CentOS, and RHEL (6+ years), with additional experience in Windows Server environments.
- Hands-on experience with security practices including WAF management, vulnerability scanning, LDAP, OS hardening, and kernel patching.
- Skilled in automation using Ansible (playbooks, roles, AWX/Tower) and scripting with Python or Shell.
- Proficient in GitHub Enterprise administration, GitHub Actions, and branch protection rules.
- Solid knowledge of container technologies including Docker (image building and security scanning) and Kubernetes (deployment, networking, storage).
- Experience managing Apache and Nginx web servers, including SSL and reverse proxy configurations.
- Familiarity with monitoring solutions such as Prometheus, Grafana, ELK, and commercial tools like Datadog or New Relic.
- Knowledge of code security tools such as SonarQube, Snyk, and Checkmarx for SAST/DAST.

Preferred Qualifications and Benefits

Certifications such as RHCE, Certified Kubernetes Administrator (CKA), or CISSP are highly desirable. The ideal candidate will demonstrate strong communication and documentation skills, a collaborative mindset aligned with DevOps/DevSecOps philosophies, and the ability to mentor junior engineers and conduct technical interviews. Calmness under pressure during incidents and a commitment to continuous improvement are essential traits.

This position offers the opportunity to work in a dynamic environment where innovation and security are prioritized. We are an equal opportunity employer committed to fostering an inclusive workplace.

If you are passionate about building resilient infrastructure and driving operational excellence, we encourage you to apply.