Walk-in || DevOps & IT Security Engineer

Purpose of the role

Own client-facing infrastructure and the security posture of everything we run. Self-hosted client deployments, cloud infrastructure, migrations, backups, access control and incident response sit with this seat.

Client production systems depend on this role directly. Downtime on a client instance is a commercial event, not a technical one.

Key responsibilities

Infrastructure operations

• Provision, configure and maintain client server environments across cloud providers and self-hosted deployments.
• Run OS-level administration on Linux servers: patching, upgrades, performance tuning, resource monitoring, capacity planning.
• Maintain uptime against contracted service levels. Monitor proactively; do not learn about an outage from the client.
• Manage DNS, SSL certificates, mail deliverability records and domain configuration across all company and client domains.

Migrations

• Plan and execute server and platform migrations end to end: assessment, runbook, dry run, cutover, validation, rollback plan.
• Produce a written migration plan before any cutover, including a defined rollback trigger and a named fallback state.
• Execute cutovers inside agreed maintenance windows with confirmed client sign-off.

Backup and recovery

• Maintain backup schedules across every production system with defined retention.
• Test restores on a fixed schedule. An untested backup is not a backup.
• Maintain documented recovery procedures with actual recovery time objectives per system.

Security

• Own access control across all systems: provisioning, revocation on exit, periodic review, least-privilege enforcement.
• Manage credential handling and rotation. Credentials never travel through chat groups, plain text or shared documents.
• Harden servers: firewall rules, SSH configuration, intrusion detection, vulnerability patching on a defined cadence.
• Run periodic security reviews of client-facing infrastructure and produce written findings with remediation priority.
• Respond to security incidents: contain, investigate, remediate, document. Produce a written incident record every time.
• Maintain compliance posture relevant to client data handling in both UAE and India jurisdictions.

Integrations and internal technical support

• Build and maintain API integrations between client systems and third-party platforms.
• Support technical elements of the sales process: environment provisioning for demos, technical feasibility assessment, integration scoping input.
• Handle scripted data operations, extraction tasks and automation the delivery and sales teams require.

Documentation and handover

• Document every environment: architecture, access paths, dependencies, credentials location, recovery procedure.
• No single point of failure on knowledge. Every system you run must be operable by someone else from your documentation.
• Maintain a current inventory of all client infrastructure with hosting provider, renewal date, cost and owner.

Commercial boundaries

• Infrastructure work outside a signed scope is quoted as a variation before it starts. Flag it; do not absorb it.
• Never commit timelines, scope or support terms to a client directly. Technical input goes to the account owner, who commits commercially.
• Managed infrastructure is a priced service. Nothing is provided complimentary without written approval.

Requirements

• 3 to 5 years in DevOps, systems administration, cloud infrastructure or IT security.
• Strong Linux server administration. Command-line proficiency is assumed, not a bonus.
• Hands-on experience with at least two of: AWS, Google Cloud, Oracle Cloud, Azure, Hetzner or comparable providers.
• Demonstrated migration experience. You have moved a live production system and can describe the plan, the failure modes and the rollback.
• Networking fundamentals: DNS, TLS, firewalls, VPN, reverse proxies, load balancing.
• Scripting capability in Bash and Python for automation, monitoring and data operations.
• Backup and disaster recovery experience with tested restores, not just configured schedules.
• Security fundamentals: hardening, access control, vulnerability management, incident response.
• Ability to write documentation another engineer can follow without asking you a question.

Preferred

• Experience running self-hosted enterprise software for external clients under service-level commitments.
• Containerisation and orchestration experience: Docker, Kubernetes.
• Infrastructure as code: Terraform, Ansible.
• Monitoring and alerting stacks: Prometheus, Grafana, Zabbix or equivalent.
• API integration development experience.
• Security certification: CompTIA Security+, CEH, AWS Security Specialty or equivalent.
• Exposure to data protection requirements in UAE or India.