Description

You will own infrastructure security, hardening, and automation across the server fleet.

This role is remote.

Responsibilities

• Harden Linux and Windows servers using CIS Benchmarks, OpenSCAP, and Lynis.
• Implement host-level controls including SSH hardening, SELinux/AppArmor, auditd, and kernel parameters.
• Manage vulnerability scanning, CVE triage, and automated patching with OpenVAS or Nessus.
• Deploy centralized logging, monitoring, and file integrity detection using Wazuh, ELK, or Graylog.
• Automate configuration as code with Ansible, ensuring version control and drift detection.

Required Skills

• 5+ years in DevOps, systems engineering, or infrastructure roles with security focus.
• Deep Linux administration skills (RHEL/Ubuntu), PAM, and kernel security.
• Proficiency with Ansible for automated configuration and hardening at scale.
• Strong networking fundamentals: TCP/IP, VLANs, firewalls, TLS/PKI, and segmentation.
• Experience with vulnerability scanning and patch management in on-prem environments.
• Scripting ability in Bash and Python.
• Familiarity with virtualization platforms (VMware vSphere, Proxmox, Hyper-V).
• Version control (Git) and infrastructure-as-code practices.

Preferred Skills

• Experience with secrets management (HashiCorp Vault) and identity infrastructure (Active Directory/LDAP).
• Knowledge of compliance frameworks such as NIST or ISO 27001.

Key Skills

Education

Bachelor's degree