Infrastructure/Platform Engineer

About the Position

We are looking for an Infrastructure/Platform Engineer to join our team and help us maintain, secure, and continuously improve our self-hosted infrastructure platform.

Our infrastructure consists of approximately 20 Linux and Windows hosts across four environments: PROD, STAG, TEST, and DEV. You will work closely with the current Infrastructure Lead, helping ensure reliable day-to-day operations, strengthen security, and reduce single-person dependency.

A significant part of the role will focus on security and CVE management, infrastructure automation, monitoring, patch management, and operational reliability.

Responsibilities

• Infrastructure Operations: Maintain and support approximately 20 Linux and Windows hosts across PROD, STAG, TEST, and DEV environments.
• Security & CVE Management: Monitor, triage, and remediate vulnerabilities across OS packages, container images, and third-party applications.
• Vulnerability Management: Operate and maintain security tooling, including Harbor/Trivy for container scanning, Renovate for automated dependency updates, and Wazuh SCA/FIM for security and compliance findings.
• Patch Management: Plan and execute patch cycles safely using a test → staging → production approach, including kernel updates, database hosts, and clustered services.
• Infrastructure Automation: Develop and maintain Ansible playbooks, roles, inventories, and automated infrastructure workflows.
• Container Operations: Manage Docker-based infrastructure, including images, registries, networking, and Compose-based services.
• Networking & Security: Maintain firewalls, VPNs, reverse proxies, TLS certificates, and other core networking components.
• Database Operations: Support database infrastructure, including backups, replication/log shipping, maintenance, and patching.
• Monitoring & Logging: Maintain monitoring, alerting, and centralized logging using Prometheus, Grafana, Alertmanager, Loki, or similar tools.
• Documentation & Compliance: Keep infrastructure changes, patching evidence, operational decisions, and runbooks up to date in line with NIS2 and GDPR requirements.
• Reliability & Incident Management: Troubleshoot incidents, identify root causes, improve system reliability, and continuously automate and improve infrastructure processes.
• Cross-functional Collaboration: Work closely with the Infrastructure Lead and other technical specialists to maintain and improve the platform.

Requirements

• 2+ years of professional experience in Infrastructure/Platform Engineering, DevOps, System Administration, or a similar role.
• Strong Linux administration skills, preferably Debian, with confidence working from the CLI.
• Solid experience with Windows Server administration.
• Hands-on experience with Ansible, including playbooks, roles, and inventories.
• Practical experience with Docker and container operations, including image lifecycle, registries, networking, and Docker Compose-based stacks.
• Good understanding of networking and security fundamentals, including iptables/UFW, Windows Firewall, WireGuard, reverse proxies, and TLS/certificate management (ACME).
• Experience with database operations, preferably MariaDB/Galera clusters and/or Microsoft SQL Server, including backups, log shipping, maintenance, and patching.
• Experience with monitoring and logging, such as Prometheus, Grafana, Alertmanager, and Loki or similar solutions.
• Strong understanding of Git-based workflows and infrastructure changes managed through version control and pipelines.
• Security-minded approach and understanding of secure production practices.
• English - B2 or higher, with good written and spoken communication skills.

Nice to Have

• Experience with VMware, VMware Cloud Director, or NSX, or willingness to learn.
• Experience with Azure hybrid services, including Azure Arc, Managed Instance, or Blob Storage for offsite backups.
• Experience with SSO/IAM solutions, such as Authentik, OIDC/SAML, and secrets management.
• Scripting experience with Python and/or PowerShell.
• Familiarity with NIS2/GDPR operational requirements, including incident reporting, audit trails, and data classification.
• Experience with distributed systems and clustered infrastructure.

Availability & on-call

• Willingness to occasionally intervene outside office hours in case of incidents such as failed services, security events, or backup/replication failures.
• This is not a permanent 24/7 rotation, but responsiveness when critical issues occur is expected.
• As the team grows, participation in a shared standby/on-call arrangement is planned so that the out-of-hours workload is distributed across the team.

Our selection process includes

• HR interview.
• Technical interview.
• Interview with the client.
• Final interview with the founders of the company.

We Offer

• Monday–Friday working schedule.
• Office/remote/hybrid work format.
• Medical insurance.
• No time trackers or unnecessary bureaucracy.
• Paid days off and sick days.
• Gifts for birthdays and professional holidays.
• The opportunity to test your ideas, lead initiatives, and try new approaches.
• Communication with experienced specialists who are willing to share their knowledge.
• Participation in internal and external events, with opportunities to build and promote your professional brand.
• The opportunity to work with modern infrastructure, security tooling, automation, and cloud/hybrid technologies.
• A role with a strong focus on infrastructure security, reliability, automation, and continuous improvement.