Infrastructure/Platform Engineer

We are looking for an **Infrastructure/Platform Engineer** to join our team and help us maintain, secure, and continuously improve our self-hosted infrastructure platform. Our infrastructure consists of approximately **20 Linux and Windows hosts** across four environments: **PROD, STAG, TEST, and DEV**. You will work closely with the current Infrastructure Lead, helping ensure reliable day-to-day operations, strengthen security, and reduce single-person dependency. A significant part of the role will focus on **security and CVE management, infrastructure automation, monitoring, patch management, and operational reliability**. #### **Requirements** * **2+ years of professional experience** in Infrastructure/Platform Engineering, DevOps, System Administration, or a similar role; * Strong **Linux administration** skills, preferably Debian, with confidence working from the CLI; * Solid experience with **Windows Server administration**; * Hands-on experience with **Ansible**, including playbooks, roles, and inventories; * Experience with an Ansible orchestration layer such as **Semaphore**; * Practical experience with **Docker and container operations**, including image lifecycle, registries, networking, and Docker Compose-based stacks; * Good understanding of **networking and security fundamentals**, including iptables/UFW, Windows Firewall, WireGuard, reverse proxies, and TLS/certificate management (ACME); * Experience with **database operations**, preferably MariaDB/Galera clusters and/or Microsoft SQL Server, including backups, log shipping, maintenance, and patching; * Experience with **monitoring and logging**, such as Prometheus, Grafana, Alertmanager, and Loki or similar solutions; * Strong understanding of **Git-based workflows** and infrastructure changes managed through version control and pipelines; * Security-minded approach and understanding of secure production practices; * English — B2 or higher, with good written and spoken communication skills. #### **Responsibilities** * **Infrastructure Operations:** Maintain and support approximately 20 Linux and Windows hosts across PROD, STAG, TEST, and DEV environments; * **Security & CVE Management:** Monitor, triage, and remediate vulnerabilities across OS packages, container images, and third-party applications; * **Vulnerability Management:** Operate and maintain security tooling, including Harbor/Trivy for container scanning, Renovate for automated dependency updates, and Wazuh SCA/FIM for security and compliance findings; * **Patch Management:** Plan and execute patch cycles safely using a test → staging → production approach, including kernel updates, database hosts, and clustered services; * **Infrastructure Automation:** Develop and maintain Ansible playbooks, roles, inventories, and automated infrastructure workflows; * **Container Operations:** Manage Docker-based infrastructure, including images, registries, networking, and Compose-based services; * **Networking & Security:** Maintain firewalls, VPNs, reverse proxies, TLS certificates, and other core networking components; * **Database Operations:** Support database infrastructure, including backups, replication/log shipping, maintenance, and patching; * **Monitoring & Logging:** Maintain monitoring, alerting, and centralized logging using Prometheus, Grafana, Alertmanager, Loki, or similar tools; * **Documentation & Compliance:** Keep infrastructure changes, patching evidence, operational decisions, and runbooks up to date in line with NIS2 and GDPR requirements; * **Reliability & Incident Management:** Troubleshoot incidents, identify root causes, improve system reliability, and continuously automate and improve infrastructure processes; * **Cross-functional Collaboration:** Work closely with the Infrastructure Lead and other technical specialists to maintain and improve the platform. #### **Soft skills** * **Security-minded:** follows the principles of least privilege, safe defaults, and avoids shortcuts in production; * **Structured problem-solving:** stays calm under pressure and approaches incidents and technical issues systematically; * **Documentation-first mindset:** keeps changes, decisions, runbooks, and handover documentation up to date; * **Proactive communication:** works independently while clearly communicating risks, changes, and potential issues; * **Pragmatic approach:** prefers proven, maintainable solutions over unnecessary complexity; * **Attention to detail:** understands the importance of reliable infrastructure, accurate documentation, and safe production changes; * **Good written communication in English**, especially for technical documentation and incident reports. #### **Would be a plus** * Experience with **VMware, VMware Cloud Director, or NSX**, or willingness to learn; * Experience with **Azure hybrid services**, including Azure Arc, Managed Instance, or Blob Storage for offsite backups; * Experience with **SSO/IAM solutions**, such as Authentik, OIDC/SAML, and secrets management; * Scripting experience with **Python and/or PowerShell**; * Familiarity with **NIS2/GDPR operational requirements**, including incident reporting, audit trails, and data classification; * Experience with **distributed systems and clustered infrastructure**. #### **Availability & on-call** * Willingness to occasionally intervene outside office hours in case of incidents such as failed services, security events, or backup/replication failures; * This is **not a permanent 24/7 rotation**, but responsiveness when critical issues occur is expected; * As the team grows, participation in a **shared standby/on-call arrangement** is planned so that the out-of-hours workload is distributed across the team. #### **Our selection process includes** * HR interview; * Technical interview; * Interview with the client; * Final interview with the founders of the company. #### **We offer** * Monday–Friday working schedule; * Office/remote/hybrid work format; * Medical insurance; * No time trackers or unnecessary bureaucracy; * Paid days off and sick days; * Gifts for birthdays and professional holidays; * The opportunity to test your ideas, lead initiatives, and try new approaches; * Communication with experienced specialists who are willing to share their knowledge; * Participation in internal and external events, with opportunities to build and promote your professional brand; * The opportunity to work with modern infrastructure, security tooling, automation, and cloud/hybrid technologies; * A role with a strong focus on infrastructure security, reliability, automation, and continuous improvement.