IT Security Officer - Infrastructure Automation and Observability Engineer

Overview

Seeking an IT Security Officer - Infrastructure Automation and Observability Engineer to design, implement, automate, and improve infrastructure platforms and managed services for CERT-EU.

Key Responsibilities

• Networking, virtualisation, storage, Linux infrastructure, containerisation and orchestration.
• Firewalls and VPNs, routing and switching, DNS, managed services including Elasticsearch, S3, PostgreSQL, and GitLab, SSO and IAM, access control.
• Documentation, security and hardening.

Required Experience

At least three years of relevant experience in the field. Extensive experience in Automation, Infrastructure-as-Code (IaC), configuration management and CI/CD practices using technologies such as Terraform, Ansible, Git or equivalent automation frameworks. Knowledge in observability, including metrics, logging, tracing, alerting, using technologies such as Prometheus, Grafana, Elasticsearch, Kibana or equivalent. In-depth knowledge of the architecture of infrastructure and services, managing the interactions between networking, compute, virtualisation, storage, container platforms and core infrastructure services. Hands-on experience in networking, including routing (LAN and WAN), switching, VLANs, DNS, DHCP, VPN technologies, load balancing, network segmentation and network troubleshooting. Hands-on experience in virtualisation via Proxmox, VMware vSphere or other hypervisors, including cluster management, high availability and lifecycle management. Knowledge of storage technologies, including SAN, NAS, Fibre Channel, iSCSI, distributed storage systems, replication, backup solutions and storage performance optimisation. Experience with Identity and Access Management (IAM), Single Sign-On (SSO) and authentication technologies, including Keycloak, Okta or equivalent platforms. Knowledge of Linux system administration and enterprise infrastructure services. Understanding of container platforms and orchestration technologies, including Kubernetes. Ability to manage infrastructure security technologies and services, including firewalls, reverse proxies, VPNs, PKI, certificate lifecycle management. Programming skills in scripting and automation using Python, Bash, JavaScript, or other tools, including the development of automation workflows.

Qualifications

Have a level of education which corresponds to completed university studies of at least three years attested by a diploma.

Other Details