About the role
We operate a highly available, auto-scaling environment built on Apache load balancers, Docker containers, and GCP services (Cloud Armor, Cloud NAT, Filestore, Cloud SQL , File sharing). With Jenkins-driven CI/CD, security is woven into every layer. You will partner with our CTO and IT Manager to:
- Harden the platform end-to-end.
- Run 24 × 7 monitoring and always available for any incident response and support.
- Own backup, disaster-preparedness, and recovery (DPR).
- Keep attackers out while the business scales.
Key responsibilities
- Build and maintain secure CI/CD pipelines in Jenkins + Bitbucket.
- Write Bash / shell scripts to automate provisioning and deployments on Ubuntu / Debian.
- Harden Dockerfiles, Docker Compose manifests, and base OS images.
- Design scalable, secure server and network architectures for companies projects.
- Configure, tune, and monitor ModSecurity (OWASP CRS), Fail2Ban, Firewall and Google Cloud Armor.
- Design and automate backup & DPR strategies:
- Automated MySQL dumps, encrypted bucket snapshots, GCP → AWS cross-cloud replication
- Schedule and run regular restore drills; document and meet RTO/RPO targets.
- Deploy centralized logging and metrics visualizations with actionable alerts. (ElasticxKibana)
- Lead incident handling, root-cause analysis, and continuous security improvements.
- Champion secure-coding practices (OWASP,WAF rules) across development teams.
- Produce clear technical documentation, performance reports, and daily monitoring summaries.
- Monitoring server and cloud architect usage and spending with best solutions provided.