DevOps Consultant/Engineer
Location:
Barrow/Remote Salary:
£50K + Benefits A DevOps Consultant is required for our client who is based in Barrow. You will join the Software Development & Server Management Team and report directly to the Head of IT. This role is integral in the deployment, maintenance, and security of a large estate of cloud-based servers hosting bespoke in-house built cloud software across multiple datacentres. You will have hands-on practical experience. The majority of this estate runs Linux, which is essential. Your day-to-day will be varied and fast-paced; you will be heavily integrated with the Full Stack Developers in our team who are deploying new features weekly and fixing existing codebase issues from a backlog. You will also be involved in the deployment of new cloud servers, configuration maintenance, and hardening/securing each server. You will be responsible for the ongoing maintenance and hardening of the 25 existing cloud servers in the server estate. Key accountabilities of the role include: Server Management, Maintenance, Upgrades & Compliance:
Responsible for the entire server lifecycle, from server deployment to maintaining, upgrading, and ensuring compliance of every server in our estate. Resource increases when necessary for scalability - RAM, Disk Size, CPU etc. MySQL Database management, maintenance, and compliance. MySQL Replication maintenance and management (Master-Master & Master-Slave relationships). Linux Operating System distribution migration (moving our servers to a new Linux distribution where required). Updating server software repositories via DNF. NFS mounting and management in a secure environment. Implementing and maintaining TDE/At Rest Encryption (or similar). Server Account Management. WHM/CPanel Configuration and Management. Backup configuration and restoration testing.
Linux & Windows Server Daily Business Continuity Checks:
To ascertain and document server health via daily check processes - which are to be refined. To resolve availability, integrity, or security issues as they arise independently and be able to raise critical issues with other members of the team or leadership team where appropriate. Able to communicate risk in a measured, calculable way in line with ISO27001 methodologies.
Information Security Engineering:
Responsible for improving and maintaining the security baselines across the company, from conceptualization to implementation and daily maintenance. This responsibility includes the servers as well as the bespoke built applications and code. Server Environment Hardening. ModSec Firewall Configuration. Securing Network Environments. Firewall Configuration (Server and Network Level). PKI Management. Intrusion Detection and Prevention. TLS, HSTS & CSP Configuration Management. Risk Management and Treatment. Vulnerability Management and Triage. Routine internal system audits. Establishing InfoSec baselines within the company. Configuring and managing Cloudflare as a reverse proxy and Web Application Firewall. WAF Event risk management and triage. Zero Trust configuration and management. Security best practices and experience conforming to standards such as: ISO27001:2022 Framework OWASP NIST CSF PCI DSS 4.0 SOC-2 NCSC Best Practices
#J-18808-Ljbffr
Barrow/Remote Salary:
£50K + Benefits A DevOps Consultant is required for our client who is based in Barrow. You will join the Software Development & Server Management Team and report directly to the Head of IT. This role is integral in the deployment, maintenance, and security of a large estate of cloud-based servers hosting bespoke in-house built cloud software across multiple datacentres. You will have hands-on practical experience. The majority of this estate runs Linux, which is essential. Your day-to-day will be varied and fast-paced; you will be heavily integrated with the Full Stack Developers in our team who are deploying new features weekly and fixing existing codebase issues from a backlog. You will also be involved in the deployment of new cloud servers, configuration maintenance, and hardening/securing each server. You will be responsible for the ongoing maintenance and hardening of the 25 existing cloud servers in the server estate. Key accountabilities of the role include: Server Management, Maintenance, Upgrades & Compliance:
Responsible for the entire server lifecycle, from server deployment to maintaining, upgrading, and ensuring compliance of every server in our estate. Resource increases when necessary for scalability - RAM, Disk Size, CPU etc. MySQL Database management, maintenance, and compliance. MySQL Replication maintenance and management (Master-Master & Master-Slave relationships). Linux Operating System distribution migration (moving our servers to a new Linux distribution where required). Updating server software repositories via DNF. NFS mounting and management in a secure environment. Implementing and maintaining TDE/At Rest Encryption (or similar). Server Account Management. WHM/CPanel Configuration and Management. Backup configuration and restoration testing.
Linux & Windows Server Daily Business Continuity Checks:
To ascertain and document server health via daily check processes - which are to be refined. To resolve availability, integrity, or security issues as they arise independently and be able to raise critical issues with other members of the team or leadership team where appropriate. Able to communicate risk in a measured, calculable way in line with ISO27001 methodologies.
Information Security Engineering:
Responsible for improving and maintaining the security baselines across the company, from conceptualization to implementation and daily maintenance. This responsibility includes the servers as well as the bespoke built applications and code. Server Environment Hardening. ModSec Firewall Configuration. Securing Network Environments. Firewall Configuration (Server and Network Level). PKI Management. Intrusion Detection and Prevention. TLS, HSTS & CSP Configuration Management. Risk Management and Treatment. Vulnerability Management and Triage. Routine internal system audits. Establishing InfoSec baselines within the company. Configuring and managing Cloudflare as a reverse proxy and Web Application Firewall. WAF Event risk management and triage. Zero Trust configuration and management. Security best practices and experience conforming to standards such as: ISO27001:2022 Framework OWASP NIST CSF PCI DSS 4.0 SOC-2 NCSC Best Practices
#J-18808-Ljbffr
