Security Infrastructure Engineer – Senior

Overview:SOFTSWISS is looking for a Security Infrastructure Engineer to join our team and take ownership of the infrastructure behind our security systems.Purpose of the role:As a Security Infrastructure Engineer, you will be responsible for designing, building, and maintaining the infrastructure that powers the company’s security systems. You will ensure high availability, scalability, and reliability of security platforms, while driving automation, improving operational efficiency, and supporting secure integrations across cloud and on-premise environments.Key responsibilities:Design, deploy, and maintain the security team infrastructure.Ensure high availability and reliability of security platforms through proactive monitoring, alerting, and capacity planning.Manage and evolve cloud infrastructure across datacenter dedicated servers and cloud providers.Automate routine operational tasks: provisioning, configuration management, patching, and secret rotation.Troubleshoot and resolve infrastructure incidents as the primary technical owner.Maintain infrastructure documentation: architecture diagrams, runbooks, and change logs.Collaborate with security engineers to ensure underlying platforms meet tooling and integration requirements.Required Experience:5+ years of hands-on Linux system administration experience in production environmentsDeep expertise in Linux internals: systems, networking stack, storage, performance tuningSolid understanding of networking fundamentals: TCP/IP, DNS, TLS, routing, firewalling (iptables / nftables)Experience with bare-metal and dedicated server environments (Hetzner or similar providers)Hands-on experience deploying, operating, and hardening Kubernetes clusters in production, including cluster lifecycle management, CNI networking (Cilium preferred), storage, RBAC Experience deploying, configuring, and operating ClickHouse and PostgreSQL in a production environmentHands-on experience operating and maintaining Keycloak in production, including HA setup, backend management, realm/client configurationUnderstanding of identity protocols: OIDC, SAML 2.0, OAuth 2.0 Hands-on experience operating infrastructure across cloud platforms and dedicated servers, including compute, networking, storage, and cost optimisationProficiency in Infrastructure as Code: Terraform, SaltStack, AnsibleStrong scripting skills: Python and/or Go for automation and operational toolingExperience building and maintaining monitoring stacks: Prometheus, Grafana, AlertmanagerFamiliarity with log management and aggregation: Vector, Loki, or ELKClear and structured written and verbal communication skills.Upper-Intermediate (B2) or higher English levelNice to have:Experience with Talos Linux or other immutable / minimal OS distributionsExperience with secrets management: HashiCorp Vault / OpenBao, dynamic secrets, PKIKnowledge of ClickHouse integrations: Vector pipelines, S3-compatible object storage backendsExperience in multi-cloud or hybrid infrastructure environmentsRelevant certifications: CKA (Certified Kubernetes Administrator), OCI Architect Associate, Linux Foundation LFCSOur Benefits:Full-time remote work opportunities and flexible working hoursPrivate insuranceAdditional 1 Day Off per calendar yearSports program compensationComprehensive Mental Health ProgrammeFree online English lessons with a native speakerGenerous referral programTraining, internal workshops, and participation in international professional conferences and corporate events.Originally posted on Himalayas