Senior Infrastructure & DevOps Engineer

119 dinCloud Pakistan (Private) Limited; Islamabad; Remote; PKR 250,000 - 420,000; Full time

Job summary

XTIUM is seeking an experienced SRE/DevOps engineer to lead Linux system administration, security hardening, and automation across production and staging environments. You will manage Kubernetes clusters, Docker images, and CI/CD pipelines, while improving monitoring, incident response, and cloud-native practices.

Applicants should bring 8+ years in the field, strong scripting skills, and certifications such as RHCE, CKA, or CISSP, with a collaborative, calm approach to incidents.

Qualifications

• 8+ years in SRE/DevOps/Systems Engineering roles.
• Experience with Terraform or other IaC tools.
• Familiarity with Istio/Linkerd and CNI plugins Calico/Cilium or similar.
• Understanding of zero-trust networking and SSO integrations.
• Certifications: RHCE, CKA, or CISSP are a plus.
• OS: Rocky Linux, CentOS, RHEL (6+ years); Windows Server experience.
• Security: WAF, vulnerability scanning, LDAP, OS hardening, kernel patching.
• Automation: Ansible (playbooks, roles, AWX/Tower), Python/Shell scripting.
• CI/CD/SCM: GitHub Enterprise administration, GitHub Actions, branch protection rules.
• Containers: Docker (build/security scanning), Kubernetes (deployment, networking).
• Web Servers: Apache, Nginx (configuration, SSL, reverse proxy).
• Monitoring: Prometheus, Grafana, ELK, or Datadog.
• Code Security: SAST/DAST tools (SonarQube, Snyk, Checkmarx).
• Soft Skills & Cultural Fit Strong communication and documentation skills.
• Ability to mentor junior engineers and conduct technical interviews.
• Collaborative mindset with DevOps/DevSecOps philosophy.
• Calm under pressure during incidents; drive for continuous improvement.

Responsibilities

• Infrastructure & OS Management: Manage Linux-based systems in production and staging; patching and hardening.
• Security & Compliance: Perform vulnerability assessments and integrate SAST/DAST into CI/CD; LDAP auth; configure WAFs.
• Automation & Configuration Management: Write Ansible playbooks; manage GitHub Enterprise; develop Python/Shell scripts.
• Application & Web Server Management: Configure Apache/Nginx; tune performance; manage SSL/TLS and proxy setups.
• Container Orchestration & Cloud-Native: Deploy and scale on Kubernetes clusters; build secure Docker images; monitor health.
• Monitoring & Incident Management: Set up Prometheus/Grafana/ELK; define SLIs/SLOs; lead on-call and incident response.

Skills

SRE/DevOps experience

Terraform

Zero-trust networking

SSO integrations

GitHub Actions

Kubernetes

Docker

Ansible

Linux hardening

Incident response

Education

RHCE

CKA

CISSP

Tools

GitHub Enterprise

AWX/Tower

SonarQube

Snyk

Checkmarx

Nessus

Qualys

OpenVAS

Prometheus

Grafana

Job description

The XTIUM global team is made up of a group of diverse and talented professionals who are all driven by the same goal: excellence and continuous improvement. We are all about embracing challenges, keeping the lines of communication open and working together. We take ownership of our work, focus on learning and growing and hold ourselves accountable to our colleagues and customers. Together, we strive to push boundaries, make an impact and inspire each other to reach our full potential.

Job Description

1. Infrastructure & OS Management Manage and maintain Linux-based systems (Rocky Linux, CentOS, RHEL) in production and staging environments. Perform kernel patching, security updates, and system hardening following industry best practices. Troubleshoot and debug complex OS-level issues (performance, memory, I/O, kernel panics). Manage and support Windows Server environments where applicable.
2. Security & Compliance Perform regular security scanning and vulnerability assessments using tools like Nessus, Qualys, or OpenVAS. Conduct code security scans (SAST/DAST) and integrate them into CI/CD pipelines. Configure and maintain LDAP authentication for centralized access management. Ensure all systems comply with internal security policies and external regulatory standards. Implement and manage WAF (Web Application Firewall) configurations to protect against OWASP Top 10 threats.
3. Automation & Configuration Management Write and maintain Ansible playbooks for automated provisioning, patching, and configuration management. Manage GitHub Enterprise repositories, branching strategies, and CI/CD workflows (GitHub Actions preferred). Develop automation scripts using Python, Shell, or Go to reduce toil and improve operational efficiency.
4. Application & Web Server Management Configure and maintain Apache and Nginx web servers, including performance tuning and reverse proxy setup. Troubleshoot web server logs, SSL/TLS issues, and load balancing configurations.
5. Container Orchestration & Cloud-Native Technologies Deploy, manage, and scale applications on Kubernetes clusters (EKS, AKS, or on-prem). Build and maintain Docker images with secure base layers and minimal attack surfaces. Monitor cluster health, resource usage, and implement auto-scaling policies.
6. Monitoring & Incident Management Deploy and maintain monitoring tools (Prometheus, Grafana, Datadog, or ELK stack). Define SLIs, SLOs, and error budgets; drive blameless post-mortems. Participate in on-call rotations and lead incident response efforts.

What Qualifies You

• 8+ years in SRE, DevOps, or Systems Engineering roles.
• Experience with Terraform or other IaC tools.
• Familiarity with service mesh (Istio/Linkerd) and CNI plugins (Calico/Cilium) or similar.
• Understanding of zero-trust networking and SSO integrations.
• Certifications: RHCE, CKA, or CISSP are a plus.
• OS: Expert in Rocky Linux, CentOS, RHEL (6+ years); Windows Server experience.
• Security: WAF, vulnerability scanning, LDAP, OS hardening, kernel patching.
• Automation: Ansible (playbooks, roles, AWX/Tower), Python/Shell scripting.
• CI/CD/SCM: GitHub Enterprise administration, GitHub Actions, branch protection rules.
• Containers: Docker (build/security scanning), Kubernetes (deployment, networking, storage).
• Web Servers: Apache, Nginx (configuration, SSL, reverse proxy).
• Monitoring: Prometheus, Grafana, ELK, or commercial tools (Datadog/New Relic).
• Code Security: SAST/DAST tools (SonarQube, Snyk, Checkmarx).
• Soft Skills & Cultural Fit Strong communication and documentation skills.
• Ability to mentor junior engineers and conduct technical interviews.
• Collaborative mindset with DevOps/DevSecOps philosophy.
• Calm under pressure during incidents; drive for continuous improvement.

XTIUM is an equal opportunity employer.

Remote At XTIUM

At XTIUM, we don’t just build IT solutions—we build careers. Our culture is designed to empower individuals to achieve their best while making a real impact. You’ll have the opportunity to connect with our leadership team, embrace challenges, and celebrate success in a dynamic, fast-paced environment. If you’re passionate, driven, and eager to grow, XTIUM is where your potential meets opportunity. Our team members are the driving force behind our success, and we’re looking for passionate, resilient individuals eager to grow and make a meaningful impact. If you’re ready to contribute and help shape the future, XTIUM is the place for you.