Senior Infrastructure & DevOps Engineer

Xtium; United States; Remote; USD 65,000 - 95,000; Full time

Job summary

XTIUM is seeking an experienced SRE/DevOps engineer to own the reliability of our Linux-based production and staging environments. You will manage Rocky Linux, CentOS, and RHEL systems, implement kernel patches, and harden infrastructure while collaborating across teams to improve performance and security.

You’ll automate with Ansible, manage GitHub Enterprise and CI/CD workflows, deploy containers with Kubernetes (EKS/AKS/on‑prem), tune web servers, and build monitoring with Prometheus and

Qualifications

• 8+ years in SRE/DevOps or Systems Engineering roles.
• Experience with IaC tools (Terraform or similar).
• Familiarity with service mesh (Istio/Linkerd) and CNI plugins.
• Understanding of zero-trust networking and SSO integrations.

Responsibilities

• Manage and maintain Linux-based systems (Rocky Linux, CentOS, RHEL) in production and staging.
• Perform kernel patching, security updates, and system hardening per best practices.
• Configure and maintain Apache and Nginx web servers, including SSL/TLS and load balancing.
• Deploy, manage, and scale Kubernetes clusters (EKS, AKS, on‑prem) and build secure Docker images.
• Deploy and maintain monitoring (Prometheus, Grafana, Datadog, ELK) and drive blameless post-mortems.

Skills

Linux administration

Cloud-native

CI/CD

Automation

Monitoring

Education

Bachelor's degree in CS or related field

Tools

Ansible

GitHub Enterprise

Docker

Kubernetes

Job description

The XTIUM global team is made up of a group of diverse and talented professionals who are all driven by the same goal: excellence and continuous improvement. We are all about embracing challenges, keeping the lines of communication open and working together. We take ownership of our work, focus on learning and growing and hold ourselves accountable to our colleagues and customers. Together, we strive to push boundaries, make an impact and inspire each other to reach our full potential.

Job Description:

1. Infrastructure & OS Management

• Manage and maintainLinux-based systems(Rocky Linux, CentOS, RHEL) in production and staging environments.
• Performkernel patching, security updates, and system hardening following industry best practices.
• Troubleshoot and debug complex OS-level issues (performance, memory, I/O, kernel panics).
• Manage and supportWindows Serverenvironments where applicable.

2. Security & Compliance

• Perform regularsecurity scanningandvulnerability assessmentsusing tools like Nessus, Qualys, or OpenVAS.
• Conductcode security scans(SAST/DAST) and integrate them into CI/CD pipelines.
• Configure and maintainLDAPauthentication for centralized access management.
• Ensure all systems comply with internal security policies and external regulatory standards.
• Implement and manageWAF (Web Application Firewall)configurations to protect against OWASP Top 10 threats.

3. Automation & Configuration Management

• Write and maintainAnsible playbooksfor automated provisioning, patching, and configuration management.
• ManageGitHub Enterpriserepositories, branching strategies, and CI/CD workflows (GitHub Actions preferred).
• Develop automation scripts usingPython, Shell, or Goto reduce toil and improve operational efficiency.

4. Application & Web Server Management

• Configure and maintainApacheandNginxweb servers, including performance tuning and reverse proxy setup.
• Troubleshoot web server logs, SSL/TLS issues, and load balancing configurations.

1. Container Orchestration & Cloud-Native Technologies

• Deploy, manage, and scale applications onKubernetesclusters (EKS, AKS, or on-prem).
• Build and maintainDockerimages with secure base layers and minimal attack surfaces.
• Monitor cluster health, resource usage, and implement auto-scaling policies.

6. Monitoring & Incident Management

• Deploy and maintain monitoring tools (Prometheus, Grafana, Datadog, or ELK stack).
• Define SLIs, SLOs, and error budgets; drive blameless post-mortems.
• Participate in on-call rotations and lead incident response efforts.

What Qualifies You

• 8+ years in SRE, DevOps, or Systems Engineering roles.
• Experience withTerraformor other IaC tools.
• Familiarity withservice mesh(Istio/Linkerd) andCNI plugins(Calico/Cilium) or similar.
• Understanding ofzero-trust networkingandSSOintegrations.
• Certifications: RHCE, CKA, or CISSP are a plus.

OS: Expert in Rocky Linux, CentOS, RHEL (6+ years); Windows Server experience

Security: WAF, vulnerability scanning, LDAP, OS hardening, kernel patching

Automation: Ansible (playbooks, roles, AWX/Tower), Python/Shell scripting

CI/CD/SCM: GitHub Enterprise administration, GitHub Actions, branch protection rules

Containers: Docker (build/security scanning), Kubernetes (deployment, networking, storage)

Web Servers : Apache, Nginx (configuration, SSL, reverse proxy)

Monitoring: Prometheus, Grafana, ELK, or commercial tools (Datadog/New Relic)

Code Security : SAST/DAST tools (SonarQube, Snyk, Checkmarx)

Soft Skills & Cultural Fit

• Strongcommunication and documentationskills.
• Ability tomentor junior engineersand conduct technical interviews.
• Collaborative mindset with DevOps/DevSecOps philosophy.
• Calm under pressure during incidents; drive for continuous improvement.

XTIUM is an equal opportunity employer.

Remote