Senior System Administrator – Multi‑Cloud & Secure Banking

About the role

We are seeking a Senior System Administrator to lead the operation and scaling of our multi‑cloud and on‑premise infrastructure, including highly secure, air‑gapped banking environments. You will ensure reliability, security, and compliance across Windows and Linux platforms while driving automation and observability.

Key responsibilities

• Administer Windows and Linux servers in cloud, on‑premise, and isolated air‑gapped sites.
• Manage web servers (IIS, Apache, Nginx) and databases (MS SQL, PostgreSQL, MySQL).
• Maintain domain controllers, Active Directory, and Azure AD (Entra ID) services.
• Design and operate secure networks, VLANs, DNS/DHCP, load balancers, and VPNs (IPSec, OpenVPN, WireGuard).
• Configure firewalls, WAFs, and Cloudflare services including Zero Trust, DNS, CDN, and tunnels.
• Build CI/CD pipelines using open‑source tools and implement Infrastructure as Code with Terraform and Ansible.
• Deploy and manage container platforms (Docker, Kubernetes) and monitor them with Prometheus and Grafana.
• Operate Wazuh for SIEM/XDR, enforce ISO 27001 and PCI DSS compliance, and maintain audit‑ready documentation.
• Design high‑availability architectures and lead backup & disaster‑recovery planning, including immutable backups and DR drills.

Required profile

• 7–10 years of experience in IT infrastructure, DevOps, or related roles.
• Strong hands‑on expertise with Windows and Linux administration.
• Proven experience managing web servers, databases, VPNs, firewalls, and Cloudflare.
• Solid background in CI/CD, IaC (Terraform, Ansible) and container orchestration (Docker, Kubernetes).
• Ability to work in air‑gapped, highly regulated environments and follow strict security controls.
• Proficient scripting skills (PowerShell, Bash, Python).

Required skills

• Windows Server, Linux
• IIS, Apache, Nginx
• MS SQL, PostgreSQL, MySQL
• Active Directory, Azure AD (Entra ID)
• IPSec, OpenVPN, WireGuard VPNs
• Firewalls, Cloudflare (Zero Trust, WAF, DNS, CDN)
• Zero Trust, MFA, SSO, secrets management
• Kaspersky or equivalent endpoint protection
• CI/CD pipelines, Terraform, Ansible
• Docker, Kubernetes
• Prometheus, Grafana
• Wazuh SIEM/XDR
• ISO 27001, PCI DSS compliance
• Veeam, restic, Bacula backup tools
• PowerShell, Bash, Python scripting
• Intune/MDM, CIS hardening benchmarks