Lead Site Reliability & Security

About the role

We are looking for a Lead Site Reliability & Security engineer to own the reliability, performance, and security of our Linux and Windows infrastructure. You will drive automation, compliance, and incident response across cloud‑native and on‑prem environments.

Key responsibilities

• Perform kernel patching, security updates, OS hardening, and troubleshoot complex OS‑level issues on Rocky Linux, CentOS, RHEL and Windows Server.
• Run vulnerability scans (Nessus, Qualys, OpenVAS), conduct SAST/DAST code scans, manage LDAP authentication and WAF configurations to meet internal and regulatory standards.
• Develop and maintain Ansible playbooks, Terraform IaC, and automation scripts in Python, Shell or Go; manage GitHub Enterprise repositories and CI/CD pipelines with GitHub Actions.
• Configure and tune Apache and Nginx web servers, handle SSL/TLS, load balancing and reverse proxy setups.
• Deploy, scale, and monitor Kubernetes clusters (EKS, AKS, on‑prem), build secure Docker images, and implement service‑mesh (Istio/Linkerd) and CNI plugins (Calico/Cilium).
• Implement monitoring solutions (Prometheus, Grafana, Datadog, ELK), define SLIs/SLOs, and lead on‑call incident response and blameless post‑mortems.

Required profile

• 8+ years of experience in SRE, DevOps or Systems Engineering.
• Strong background in Linux system administration (Rocky Linux, CentOS, RHEL) and Windows Server.
• Hands‑on experience with security tooling, vulnerability scanning, and zero‑trust networking.
• Proven ability to mentor junior engineers and drive continuous improvement.

Required skills

• Kernel patching, OS hardening, Windows Server administration.
• Nessus, Qualys, OpenVAS, SAST/DAST tools (SonarQube, Snyk, Checkmarx).
• Ansible, Terraform, Python, Shell, Go.
• GitHub Enterprise, GitHub Actions, CI/CD pipeline design.
• Apache, Nginx, SSL/TLS, load balancing.
• Kubernetes, Docker, EKS, AKS, service‑mesh (Istio/Linkerd), CNI (Calico/Cilium).
• Prometheus, Grafana, Datadog, ELK stack.
• LDAP, WAF configuration, zero‑trust networking.