Senior Infrastructure & DevOps Engineer

The XTIUM global team consists of diverse and talented professionals united by a commitment to excellence and continuous improvement. We embrace challenges, maintain open communication, and collaborate closely. Our team takes ownership of their work, focuses on learning and growth, and holds themselves accountable to both colleagues and customers. Together, we push boundaries, make meaningful impacts, and inspire each other to reach our full potential.

Key Responsibilities

- Manage and maintain Linux-based systems (Rocky Linux, CentOS, RHEL) across production and staging environments, including kernel patching, security updates, and system hardening following industry best practices.
- Troubleshoot complex OS-level issues such as performance bottlenecks, memory leaks, I/O problems, and kernel panics. Support Windows Server environments where applicable.
- Conduct regular security scanning and vulnerability assessments using tools like Nessus, Qualys, or OpenVAS. Perform code security scans (SAST/DAST) and integrate them into CI/CD pipelines.
- Configure and maintain LDAP authentication for centralized access management and ensure compliance with internal security policies and external regulations. Implement and manage Web Application Firewall (WAF) configurations to protect against OWASP Top 10 threats.
- Develop and maintain Ansible playbooks for automated provisioning, patching, and configuration management. Manage GitHub Enterprise repositories, branching strategies, and CI/CD workflows, preferably using GitHub Actions.
- Create automation scripts using Python, Shell, or Go to improve operational efficiency and reduce manual tasks.
- Configure and maintain Apache and Nginx web servers, including performance tuning, reverse proxy setups, SSL/TLS troubleshooting, and load balancing.
- Deploy, manage, and scale applications on Kubernetes clusters (EKS, AKS, or on-premises). Build and maintain secure Docker images with minimal attack surfaces. Monitor cluster health, resource usage, and implement auto-scaling policies.
- Deploy and maintain monitoring tools such as Prometheus, Grafana, Datadog, or the ELK stack. Define SLIs, SLOs, and error budgets, lead blameless post-mortems, participate in on-call rotations, and lead incident response efforts.

Required Qualifications

- Minimum of 8 years’ experience in Site Reliability Engineering (SRE), DevOps, or Systems Engineering roles.
- Expertise in managing Rocky Linux, CentOS, and RHEL systems (6+ years), with additional experience in Windows Server environments.
- Proficient in infrastructure as code (IaC) tools such as Terraform.
- Strong knowledge of security practices including WAF management, vulnerability scanning, LDAP, OS hardening, and kernel patching.
- Skilled in automation using Ansible (playbooks, roles, AWX/Tower) and scripting languages such as Python and Shell.
- Experience administering GitHub Enterprise, managing GitHub Actions workflows, and enforcing branch protection rules.
- Solid understanding of container technologies including Docker (image building and security scanning) and Kubernetes (deployment, networking, and storage).
- Familiarity with web server management (Apache, Nginx), including SSL configuration and reverse proxy setups.
- Experience with monitoring and observability tools like Prometheus, Grafana, ELK stack, or commercial platforms such as Datadog or New Relic.
- Knowledge of code security tools such as SonarQube, Snyk, or Checkmarx for SAST/DAST scanning.

Preferred Qualifications and Additional Attributes

- Experience with service mesh technologies (Istio, Linkerd) and CNI plugins (Calico, Cilium) is a plus.
- Understanding of zero-trust networking principles and Single Sign-On (SSO) integrations.
- Relevant certifications such as RHCE, Certified Kubernetes Administrator (CKA), or CISSP are highly desirable.
- Strong communication and documentation skills, with the ability to mentor junior engineers and conduct technical interviews.
- Collaborative mindset aligned with DevOps and DevSecOps philosophies.
- Ability to remain calm under pressure during incidents and a commitment to continuous improvement.

XTIUM is proud to be an equal opportunity employer. This role is fully remote, offering flexibility and the chance to work with a global team dedicated to innovation and excellence.