IT Systems Administrator / DevOps Engineer

About the role

We are looking for a senior IT Systems Administrator / DevOps Engineer to design, operate and harden our on‑premise and hybrid infrastructure. The role covers the full lifecycle of networking, secure remote access, Linux servers, storage, backups, observability and artifact distribution. You will work hands‑on, automating tasks with Python or Bash and collaborating closely with engineering teams to keep services performant and resilient.

Key responsibilities

• Deploy, configure and maintain MikroTik and Cisco routers, L3 switches and VPN solutions such as WireGuard.
• Own firewall operations, policy design, NAT, segmentation, logging and change management across edge and internal networks.
• Design and implement internal, DMZ and external network architectures with clear trust boundaries, bastion hosts and secure SSH/RDP access patterns.
• Manage Linux server provisioning, patching, package management, service supervision, logging and out‑of‑band access (IPMI).
• Plan and operate storage solutions, RAID configurations, capacity planning and hardware lifecycle.
• Operate databases with high‑availability and disaster‑recovery strategies, including replication, backups, snapshots and DR drills.
• Implement observability, SLI/SLO definitions, alerting hygiene, incident response and post‑mortem processes.
• Deploy and maintain Nginx reverse proxy/load balancing, TLS/SSL certificates, mTLS where required, and manage IPv4 address space, DHCP/DNS integration.
• Run object‑storage services and integrate them with backup and artifact workflows.

Required profile

• Senior‑level experience in IT systems administration and DevOps engineering.
• Strong troubleshooting skills across networking, Linux, storage and security domains.
• Hands‑on mindset with a focus on automation, security hardening and reliability.

Required skills

• Python
• Bash
• MikroTik
• Cisco networking equipment
• WireGuard VPN
• Nginx
• Linux system administration
• IPMI
• RAID storage
• DHCP/DNS
• TLS/SSL and mTLS
• SSH and RDP secure access
• IPv4 addressing and subnetting
• VLAN, ACL, routing and switching
• Firewall policy design
• Load balancing and reverse proxy
• Object storage
• Backup and disaster recovery
• SRE practices (SLI/SLO, alerting, incident response)