FinTech DevSecOps Engineer - On-Prem Security & Compliance

PT. Mitramuda Kreasi Group; Kota Bandung; On-site; IDR 111,600,000 - 223,200,000; Full time

Job summary

PT. Mitramuda Kreasi Group is seeking a security-focused System Administrator/DevOps engineer to protect on-premise infrastructure and data centers. The role emphasizes hardened servers, secure networks, and compliance with financial industry standards.

You will design multi-tenant architectures, implement container security, and manage monitoring, logging, and incident response to keep 24/7 operations resilient in a fintech environment.

Qualifications

• Minimum 3-5 years in System Administration, DevOps, or Security Engineering focused on on-prem/bare-metal.
• Experience in data center server placement and hardware networking.
• Strong knowledge of TCP/IP, BGP, VPN, IDS/IPS, and firewall management.
• Proficiency with Linux (Ubuntu/Debian/RHEL).
• Ability to maintain 24/7 availability with HA considerations.
• Fintech/banking industry exposure is desirable.

Responsibilities

• Security hardening on physical servers, VMs, and hypervisor platforms (e.g., Proxmox VE) in colocation data centers.
• Design secure multi-tenant networks, configure routing, and manage firewalls with segmentation.
• Ensure infrastructure meets PCI-DSS, ISO 27001, Bank Indonesia and OJK regulations, including HSM if required.
• Audit and secure container-based environments on bare-metal infrastructure.
• Build and manage IDS/IPS, SIEM, centralized logging, and incident response.
• Monitor and secure production databases (e.g., PostgreSQL) with RBAC and encryption.

Skills

System Administration

DevOps

Security Engineering

Bare-metal Infrastructure

Data Center Networking

Linux Administration

Firewall Management

Regulatory Compliance

Tools

Proxmox VE

OPNsense

PostgreSQL

Linux (Ubuntu/Debian/RHEL)

Job description

PT. Mitramuda Kreasi Group is seeking a security-focused System Administrator/DevOps engineer to protect on-premise infrastructure and data centers. The role emphasizes hardened servers, secure networks, and compliance with financial industry standards.

You will design multi-tenant architectures, implement container security, and manage monitoring, logging, and incident response to keep 24/7 operations resilient in a fintech environment.