Инженер внедрения (DevSecOps) (Python)

​​​​​УДАЛЕННЫЙ ФОРМАТ НЕ РАССМАТРИВАЕМ!

Только гибрид и офис.

Обязательные технические навыки:

• Глубокое знание операционных систем (Linux/UNIX, Windows);
• Опыт работы с микросервисными архитектурами;
• ОС Linux (middle+/senior): глубокое понимание ядра и подсистем (процессы, память, планировщик, cgroups/namespaces), файловая система и права (VFS, ext4/xfs, ACL, quotas), systemd (юниты, зависимости, таймеры, journal), сеть на уровне хоста (iproute2, nftables/iptables, DNS, TLS), хранение данных (LVM, RAID, multipath, NFS/SMB), производительность и отладка (strace, perf, bpftrace, sysctl, iostat/vmstat/sar), безопасность (SSH, sudo, AppArmor/SELinux, аудит), резервное копирование и восстановление, базовая автоматизация (Bash/Python, Ansible).
• Опыт миграций между версиями и семействами ОС Linux (Debian/Ubuntu ↔ Astra, RHEL-семейство и др.) с переносом работающих сервисов на ВМ: планирование, тестовые прогоны, перенос конфигураций и данных, адаптация скриптов и зависимостей, откат и верификация после переключения.
• Будет плюсом опыт настройки и эксплуатации Astra Linux или RedOS в соответствии с требованиями ГОСТ и профильной документацией ФСТЭК/ФСБ.

• Сети: глубокое практическое понимание TCP/IP (адресация, подсети, маршрутизация, policy-based routing, NAT, VLAN/VRF, MTU/фрагментация, TCP тюнинг) и протоколов (DNS/DHCP/HTTP/HTTPS/SSH/NTP, базовый TLS/PKI);
• Контейнерные сети: Docker/Podman networking (bridge, host, macvlan/ipvlan), CNI-плагины, overlay-сети, namespace’ы, veth-пары, DNS внутри сетей, типичные проблемы NAT и маршрутизации контейнеров;
• Диагностика: tcpdump/Wireshark, ip/ss/ping/traceroute/dig/ethtool, умение быстро снимать фильтры, читать pcap, анализировать handshake/ретрансмиты и локализовать узкие места;
• Периметр и балансировка: nftables/iptables (и firewalld при необходимости), HAProxy (L4–L7, health checks, TLS termination), Keepalived/VIP, интеграция с мониторингом и разбор логов сетевых сервисов;
• Системы мониторинга и логирования: опыт эксплуатации Zabbix и/или Prometheus+Grafana; построение централизованного сбора и поиска логов на одном из стеков — ELK (Elasticsearch/Logstash/Kibana), Loki+Grafana, EFK/Fluentd или аналог.

Желательные навыки и сертификаты:

• Технический английский (чтение документации, RFC, работа с vendor support).
• Опыт проектирования и эксплуатации систем резервного копирования и восстановления (Commvault, КиберБэкап, rsync-цепочки, snapshot’ы, тестовые restore). Скриптинг и автоматизация: уверенный Bash, базовый Python/PowerShell для рутинных задач и интеграций.
• Понимание гибридных сред: базовое администрирование Windows Server (AD, DNS, GPO, RDP/WinRM) для взаимодействия с Linux-инфраструктурой
• Будет плюсом наличие профильных сертификатов (RHCSA/RHCE, Linux+, Zabbix Certified Specialist, сертификаты по ELK/Loki, Astra Linux/ФСТЭК).

Опыт работы и личные качества:

• Не менее 10 лет в роли системного администратора/инженера с основным упором на Linux (продакшен-эксплуатация, миграции, отказоустойчивость, безопасность);
• Внимательность, аналитическое мышление, стрессоустойчивость, коммуникабельность и готовность к обучению;
• Умение объяснять сложное простыми словами, работать в команде, вести документацию и процессы, наставничество и взаимодействие со смежными командами (сеть, безопасность, разработка);
• Опыт в составлении вспомогательной документации для коллег, работающих в связке.

Andersen is hiring a Cloud Infrastructure Administrator for a project modernizing multi-cloud IT infrastructure and ensuring secure, scalable, and reliable operations for global IoT connectivity services.

The customer is an international technology company specializing in the development and provision of advanced communication and connectivity solutions. The company serves clients across various industries, helping businesses improve operational efficiency, enhance communication capabilities, and support digital transformation through innovative technologies.

The project is focused on modernizing and managing cloud-first IT infrastructure for a satellite-based 5G IoT connectivity provider. It includes optimizing multi-cloud environments, virtualization, and enterprise IT services while ensuring security, scalability, high availability, and reliable operations to support global connectivity solutions and business growth.

• Administering and supporting Windows, Mac, Linux and mobile endpoints across the organization.
• Managing Azure services, including Microsoft 365, Entra ID, conditional access, backups and monitoring.
• Managing identity, access and devices (Entra ID, Intune, MDM).
• Securing collaboration tools, administering SharePoint Online and managing licensing (including CSP/NCE transitions).
• Maintaining virtualization platforms (Proxmox or other hypervisors) and containerized environments where applicable.
• Provisioning, monitoring and maintaining AWS infrastructure (EC2 and related resources); managing users and access on GCP.
• Managing and maintaining network and remote access infrastructure, including OpenVPN, bastion hosts, jump servers, switches, firewalls, VLANs and routing.
• Ensuring system availability and performance, managing patching and lifecycle across cloud platforms.
• Managing Veeam backup jobs, retention policies and recovery testing.
• Maintaining self-hosted or cloud-based GitHub/GitLab instances, including user access, repository administration and upkeep.
• Implementing security-by-design across IT systems.
• Supporting compliance with standards (e.g. ISO 27001) and internal policies.
• Managing vulnerabilities, patching, audits and risk assessments.
• Planning infrastructure upgrades and modernization.
• Troubleshooting complex system and virtualization issues.
• Providing L2/L3 escalation support for helpdesk and end users.
• Documenting configurations, procedures, architectures and operational standards; managing IT purchases (hardware, software licences, cloud credits) with procurement and tracking asset lifecycle to optimize spend.
• Developing working knowledge of Linux and assisting with Linux-based workloads as needed.

• Expirience as a Systems Administrator or in a comparable IT infrastructure/operations role in a corporate environment for 5+ years.
• Strong hands-on Azure/Microsoft 365 administration (Entra ID, SharePoint Admin Center, conditional access, licensing).
• Expert hands-on AWS (EC2 and related services): security, configuration, cost optimization; Linux-based workloads and VMs.
• Experience with licence review and IT cost reduction (Microsoft and/or AWS).
• Experience with backup and system monitoring solutions.
• Comfortable with enterprise ticketing systems (e.g. Jira, ServiceNow, Zendesk) for incident and request management.
• Strong troubleshooting and problem-solving skills, with a preference for GUI-driven administration tools where practical.
• Ability to work independently, manage multiple priorities, and communicate with technical and non-technical stakeholders.
• Ability to work at L2 level and escalate L3 correctly.
• Excellent documentation skills (operational guides, handover documentation).
• Level of English – Intermediate+ and above.

• Virtualization (Proxmox, Hyper-V or similar).
• Networking: OpenVPN, firewalls, VLANs, routing (TCP/IP).
• Veeam experience (strong plus) and disaster recovery.
• Familiarity with GCP user/access management.
• Scripting and automation (PowerShell, Bash or similar).
• Docker, Ansible, Terraform.
• Familiarity with maintaining GitHub/GitLab instances (user management, repository administration).
• Experience in an international organization, with diverse cultures and multiple time zones.
• Relevant certifications (AWS, Microsoft, Azure).
• Awareness of security standards (e.g. ISO 27001); high-security (defence) experience may become relevant in the future.
• Luxembourg’s official languages (French, German or Luxembourgish).

• Andersen cooperates with such businesses as Samsung, Reuter Gruppe, T-Systems, TUI, Ryanair, Johnson & Johnson, etc. This project is just your beginning here – working with us means reliability and prospects.
• We have been strengthening our expertise since 2007. During this time, we have formed an excellent BA & SA team with streamlined processes, which now consists of more than 200 qualified analysts.
• We welcome specialists from every part of the world.
• We give our employees an opportunity to attend and participate in the company’s BA meetups, as well as offer a compensation program for international professional certificates.
• There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded.
• You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow.
• Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more.

Join us!