Work Mode: Work from Office

Role : Infrastructure Lead – Linux 

Position Overview

We are seeking a Senior Infrastructure Lead with 10–15 years of experience in designing, deploying, and operating enterprise-grade infrastructure in offline / air-gapped environments.
The role requires strong ownership of Linux platforms, clustered software deployments, proxy & reverse proxy, web security (WAF, CSP), disaster recovery, and application hosting for mission-critical systems.

Mandatory Skills & Expertise :

Core Requirements :

• 10–15 years of infrastructure experience 

• Proven experience in offline / air-gapped / restricted network environments

• Strong ownership of production infrastructure and Disaster Recovery

• Experience supporting mission-critical and regulated systems

Linux & Platform (Required) :

• Strong Linux administration (RHEL 9/10 preferred)

• Server provisioning, sizing, and capacity planning

• OS hardening, user/group management, sudo policies

• systemd, log rotation, disk and I/O tuning

Clustered Software & Platform Setup (Mandatory) :

Hands-on experience setting up and maintaining clustered software in offline environments, including:

• PostgreSQL clustered deployments
  (replication / HA using tools like Patroni or equivalent)

• Redis (standalone and clustered setups)

• Kafka (broker, Zookeeper / KRaft based setups)

• MongoDB (replica sets / clustered deployments)

• ELK Stack

• Open Telemetri

• Graphana 

• Zabbix

• Tomcat

• Apche web server

• Nginx

• HaProxy

• Understanding of quorum, leader election, and failover concepts

• Ability to troubleshoot cluster-level issues

Application Hosting & Runtime Support (Mandatory) :

• Ability to deploy and manage backend services written in:

• Java (Spring Boot)

• .NET / .NET Core

• Python

• Experience hosting applications as:

• Systemd services

• Docker containers (offline images)

• Support application configuration, ports, SSL, and environment variables

• Coordinate deployments and upgrades with development teams

Proxy, Reverse Proxy & Web Server Expertise (Mandatory) :

• Strong hands-on experience with Nginx and/or Apache

• Clear understanding of:

• Proxy vs Reverse Proxy concepts

• SSL termination and certificate handling

• Load balancing and upstream configurations

• Experience configuring Apache / Nginx as reverse proxy for backend services

Web Application Security (Mandatory) :

• ModSecurity (WAF) with OWASP CRS

• Rule tuning and false-positive handling

• Content Security Policy (CSP)

• CSP headers and directives

• Protection against XSS and injection attacks

• Experience configuring security headers (HSTS, X-Frame-Options, etc.)

Networking (Required) :

• TCP/IP, DNS, NTP fundamentals

• VLANs, routing, firewall rules

• Segmented networks and DMZ architectures

• Internal CA and certificate lifecycle management

High Availability & Disaster Recovery (Mandatory) :

• Design and implement High Availability (HA) architectures

• Plan and execute Disaster Recovery (DR) strategies

• Define and enforce RPO / RTO

• Conduct DR drills and restoration testing

• Maintain DR runbooks and SOPs

Monitoring, Logging & Operations :

• Self-hosted monitoring and alerting tools

• Centralized logging and troubleshooting

• Production incident handling and Root Cause Analysis (RCA)

Responsibilities :

• Own infrastructure architecture, standards, and stability

• Design and operate offline infrastructure environments

• Set up and manage clustered databases and messaging platforms

• Implement secure reverse proxy and WAF layers

• Host and support application services (Java / .NET / Python)

• Ensure availability, performance, and security

• Lead patching, upgrades, and maintenance windows

• Handle production incidents and escalations

• Coordinate with DBA, application, and security teams

• Maintain SOPs, runbooks, and architecture documentation

• Mentor infra engineers and enforce best practices

Mandatory Note (Recommended to Keep) :

• This role requires strong experience in offline infrastructure, clustered software setups (PostgreSQL, Redis, Kafka, MongoDB), reverse proxy & WAF (Nginx/Apache, ModSecurity), CSP, and hosting Java/.NET/Python services.