DevOps Engineer – Linux, CI/CD, Docker & Sophos Firewall

# Job Description: DevOps Engineer – Linux, CI/CD, Docker & Sophos Firewall

Experience: 3–5 Years
Location: Malad ( w) , Mumbai.
Employment Type: Full-Time

Email : faiyaz.sayed@paymentz.com

Candidates from the Western suburbs of Mumbai are preferred. From Marine lines to Virar

## Key Responsibilities

### 1. Linux Server Administration
- Install, configure, manage, and troubleshoot AlmaLinux, RHEL, CentOS, and other Linux servers.- Manage users, groups, permissions, SSH access, sudo privileges, and password policies.- Configure services, systemd, networking, DNS, firewalls, storage, LVM, and disk management.- Perform server patching, security hardening, vulnerability remediation, and system updates.- Monitor CPU, memory, disk utilization, logs, and system performance.- Configure backup, recovery, log rotation, and disaster recovery procedures.- Troubleshoot production issues and maintain system availability.

### 2. CI/CD and DevOps
- Design, configure, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, or similar tools.- Manage Git repositories, branches, merge requests, access permissions, and deployment workflows.- Automate build, testing, release, and deployment processes.- Implement secure handling of credentials, tokens, secrets, and deployment keys.- Manage development, staging, and production deployment environments.- Troubleshoot pipeline failures and deployment issues.- Implement Infrastructure as Code and configuration management using Ansible or similar tools.

### 3. Docker and Containerization
- Build, deploy, and manage Docker containers and images.- Write and optimize Dockerfiles and Docker Compose configurations.- Manage container networking, volumes, registries, and environment variables.- Implement secure container image practices, vulnerability scanning, and image updates.- Troubleshoot container startup, networking, resource utilization, and application issues.- Support containerized application deployments and orchestration platforms where required.

### 4. Sophos Firewall Administration
- Configure and manage Sophos XG/XGS firewalls and Sophos Firewall OS.- Create and maintain firewall rules, NAT policies, routing, and access control policies.- Configure site-to-site IPsec VPNs and remote-access VPNs.- Implement IP and country-based restrictions, web filtering, and application control.- Configure IPS, malware protection, SSL/TLS inspection, and security policies as applicable.- Investigate firewall logs, blocked traffic, suspicious connections, and security incidents.- Troubleshoot connectivity between application servers, databases, users, and external payment or service providers.- Maintain firewall configuration backups, firmware updates, change records, and audit evidence.- Follow security best practices and applicable compliance requirements.

### 5. Security, Monitoring and Compliance
- Implement Linux security hardening and least-privilege access controls.- Monitor server and firewall logs and investigate security alerts.- Support vulnerability assessments, penetration tests, and remediation activities.- Maintain audit evidence for firewall configurations, access controls, patching, and log retention.- Support PCI DSS or other applicable information security compliance requirements.- Configure monitoring and alerting using tools such as Zabbix, Prometheus, Grafana, or similar platforms.

### 6. Troubleshooting and Documentation
- Diagnose infrastructure, network, SSL/TLS, application deployment, and connectivity issues.- Coordinate with development, network, database, and information security teams.- Maintain infrastructure diagrams, operational procedures, change records, and incident reports.- Participate in production support, incident management, and root-cause analysis.

## Required Technical Skills

- Strong hands-on experience with Linux administration, preferably AlmaLinux/RHEL.
- Practical experience with Git and GitLab CI/CD or Jenkins.- Hands-on experience with Docker and container management.- Working knowledge of Sophos XG/XGS Firewall administration.- Strong understanding of TCP/IP, DNS, HTTP/HTTPS, SSH, routing, NAT, VPN, and SSL/TLS certificates.- Experience with Bash scripting and automation.- Knowledge of Apache HTTP Server, Nginx, or Tomcat.- Experience with monitoring, troubleshooting, backup, and disaster recovery.- Understanding of security hardening, vulnerability management, and access control.

## Preferred Skills
- Kubernetes and container orchestration.- Ansible, Terraform, or other Infrastructure as Code tools.- MySQL or PostgreSQL administration.- Wazuh, SIEM, centralized logging, and endpoint security.- Cloud platforms such as AWS, Azure, or Google Cloud.- PCI DSS compliance and security audit support.

Education

PG: Any Postgraduate

Job Type: Full-time

Pay: ₹45,000.00 - ₹80,000.00 per month

Benefits:

• Health insurance
• Life insurance

Experience:

• total work: 5 years (Preferred)

Work Location: In person