Systems & IT Engineer (w/m/d) 80-100%

Papers; Zug; Vor Ort; CHF 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

25 days vacation per year

2 days home office per week

Zusammenfassung

Papers is a software engineering company focused on web3 infrastructure, seeking an experienced DevOps/SRE to manage a Linux-based fleet and CI/CD pipelines. You will own patching, backups, security hardening, and incident response in a dynamic startup environment.

You'll design automated provisioning with Ansible, operate a TIG-like monitoring stack, and collaborate with backend engineers to streamline delivery. English communication and independence are essential.

Qualifikationen

• 3+ years hands-on DevOps, SRE, or infrastructure experience.
• Proficient with Linux/Ubuntu system administration on self-managed servers.
• Experience with Docker/Docker Compose and GitLab CI workflows.
• Strong background in infrastructure-as-code, notably Ansible.
• Solid understanding of TLS, firewalls, VPNs and networking basics.
• Experience with monitoring stacks and incident response.
• Fluent written and spoken English; strong communication.
• Self-driven, organized and able to work independently.

Aufgaben

• Manage and improve self-hosted Linux infrastructure on dedicated servers.
• Maintain OS/security updates and handle backups.
• Design and maintain CI/CD pipelines with GitLab CI.
• Set up and optimize Docker/Docker Compose deployments.
• Automate provisioning with Ansible.
• Define backup strategies and disaster recovery.
• Operate Telegraf/InfluxDB/Grafana, Graylog, PagerDuty for alerts.
• Administer Microsoft 365 / Entra ID, MFA, CA, SSO.
• Support on-call rotations for critical services.
• Collaborate with backend engineers to streamline delivery.
• Automate repetitive tasks to reduce manual work.

Kenntnisse

DevOps/SRE experience

Linux/Ubuntu admin

CI/CD workflows

Infrastructure-as-code

Security fundamentals

English communication

Self-driven

Tools

GitLab CI

Docker

Nginx

Ansible

TLS/Networking

Jobbeschreibung

Please note that for this position, we'll only consider applications from people who are already living in Switzerland.

About Papers

Papers is a software engineering company founded on high-tech talent. We support the full lifecycle of innovative web3 products — from concept to software market fit — building secure, scalable futures for our clients and the internet at large.

With over a decade of experience and a reputation built on delivering for Fortune 500s and blockchain ecosystems, our teams combine deep technical know-how with a mission to enable meaningful, decentralized innovation.

As an engineering-driven team, we work with autonomy and purpose. Our culture is built on meritocracy, long-term thinking, and a commitment to quality over buzz. We aim to collaborate with people who love tech for its own sake and want to help shape the future by solving real-world challenges.

Tasks

• Manage and improve our self-hosted, Linux-based infrastructure (Ubuntu) running on a fleet of dedicated/bare-metal servers
• Keep servers patched and up to date (OS/security updates, reboots) and maintain the various applications we self-host
• Design and maintain CI/CD pipelines (GitLab CI): build images, push to the GitLab Container Registry
• Set up and optimize Docker and Docker Compose deployments
• Automate infrastructure and host provisioning with Ansible
• Define and enforce backup strategies and disaster-recovery processes.
• Run our observability stack — Telegraf + InfluxDB + Grafana for metrics and alerting (alerts route to Teams/PagerDuty), Graylog for log aggregation — and write runbooks for the alerts
• Administer Microsoft 365 / Entra ID (Azure AD) — identity & access management, MFA, Conditional Access, SSO, and email/collaboration security
• Own and continuously improve our security posture: SSH/host hardening, firewalls, secrets management, least-privilege access, periodic access reviews, and incident response
• Participate in on‑call rotations to support critical services (incl. the Acurast blockchain/bridge infrastructure)
• Collaborate with backend engineers to streamline integration and delivery
• Continuously identify and automate repetitive tasks to reduce manual intervention

Tech Stack Overview

You’ll be working with:

• Linux (Ubuntu), bare‑metal/dedicated hosts
• GitLab CI, Docker, Docker Compose
• Ansible (infrastructure‑as‑code)
• Nginx, Let’s Encrypt/certbot
• Telegraf, InfluxDB, Grafana (metrics + alerting); Graylog (logs), PagerDuty
• PostgreSQL, NATS, NetBird (mesh VPN)
• Microsoft 365 / Entra ID (Azure AD) — identity, MFA, Conditional Access
• Scripting: Bash, Python

Requirements

Your Profile

• 3+ years of hands‑on experience in DevOps, SRE, or infrastructure roles
• Proficient with Linux/Ubuntu system administration on self‑managed servers
• Comfortable with Docker / Docker Compose and CI/CD workflows (GitLab CI)
• Experience with infrastructure‑as‑code (Ansible especially)
• Confident with Nginx, TLS, shell scripting, and practical networking (reverse proxies, firewalls, VPN/overlay networks)
• Comfortable owning a metrics/alerting stack and responding to incidents
• Solid grasp of security fundamentals: identity & access management (MFA/SSO, least privilege), host hardening, secrets handling, and patch management
• Strong written and verbal communication skills in English
• Self-driven, self‑organized, pragmatic, and comfortable working independently

Benefits

Bonus if you have:

• Background in blockchain/web3 infrastructure (we run Acurast network and bridge services)
• Microsoft 365 / Entra ID administration (Conditional Access, Intune, Defender)
• Deeper security background: hardening, vulnerability/patch management, or a security certification
• Experience operating a TIG stack (Telegraf/InfluxDB/Grafana) or other time‑series monitoring
• Managed‑cloud experience (GCP/AWS/Azure) and Kubernetes/Helm
• Terraform or other declarative IaC (transferable to our Ansible setup)
• Contributions to open‑source projects
• Experience scaling infrastructure in startup or high‑growth environments

Why join Papers?

• Work with cutting‑edge web3 clients and technology.
• 25 days paid vacation per year.
• 2 days of home office per week possible
• High ownership, low bureaucracy — your voice matters.
• Influence the DevOps strategy from day one.
• Regular team events and retreats when possible.
• Learning and development supported.