Senior System Administrator

About the role

We are seeking a Senior System Administrator to lead the management and scaling of our multi‑cloud and on‑premise infrastructure, including highly secure, air‑gapped banking environments. You will be responsible for ensuring reliability, security, and compliance across Windows and Linux platforms, networking, and cloud services.

Key responsibilities

• Administer Windows and Linux servers in both cloud and isolated on‑premise settings.
• Manage web servers (IIS, Apache, Nginx) and databases (MS SQL, PostgreSQL, MySQL).
• Maintain domain controllers, Active Directory, and Azure AD (Entra ID) services.
• Design and operate secure networks (VLANs, DNS/DHCP, load balancers) and VPN solutions (IPSec, OpenVPN, WireGuard).
• Administer firewalls, WAF, and Cloudflare services, applying Zero Trust, MFA/SSO, and secrets management.
• Build and maintain CI/CD pipelines using open‑source tools.
• Implement Infrastructure as Code with Terraform and Ansible.
• Deploy and manage containerized workloads with Docker and Kubernetes.
• Set up monitoring and observability using Prometheus, Grafana, and Wazuh SIEM.
• Ensure compliance with ISO 27001 and PCI DSS, maintaining audit‑ready documentation.
• Design high‑availability architectures and lead backup & disaster‑recovery planning, including immutable backups and DR drills.

Required profile

• 7–10 years of experience in IT infrastructure, DevOps, or related roles.
• Strong hands‑on experience with Windows and Linux administration.
• Proven expertise in web servers, databases, VPNs, firewalls, and Cloudflare.
• Experience building CI/CD pipelines and using IaC tools (Terraform, Ansible).
• Ability to work in air‑gapped, highly regulated environments.
• Proficient scripting skills (PowerShell, Bash, Python).

Required skills

• Windows Server, Linux (RHEL/CentOS, Ubuntu)
• IIS, Apache, Nginx
• MS SQL, PostgreSQL, MySQL
• Active Directory, Azure AD (Entra ID)
• VLANs, DNS, DHCP, load balancers
• IPSec, OpenVPN, WireGuard
• Firewalls, WAF, Cloudflare (Zero Trust, DNS, CDN)
• Zero Trust, MFA, SSO, secrets management
• Terraform, Ansible
• Docker, Kubernetes
• Prometheus, Grafana, Wazuh
• ISO 27001, PCI DSS compliance
• Backup tools (Veeam, restic, Bacula)
• PowerShell, Bash, Python scripting