Role Overview

As IT Server & Infrastructure Specialist, you will own the full lifecycle of server provisioning, website deployment, CI/CD automation, security hardening, and compliance operations across IQ Hub's global portfolio. You will be the single point of ownership for server health, uptime, and regulatory readiness across our infrastructure — working directly with development, content, and compliance teams to ensure every website is deployed, secured, and performing at standard.

Key Responsibilities

1. Server Provisioning & OS Management

- Provision and configure servers across Ashburn, Nuremberg, and Helsinki data centres
- Install, harden, and maintain Linux operating systems with regular patching and update cycles
- Configure OS-level performance tuning, resource limits, and kernel parameters for high-availability web workloads

2. Coolify Deployment & Website Operations

- Deploy and maintain Coolify as the primary self-hosted PaaS layer for all IQ HUB websites
- Onboard and configure new websites end-to-end, from environment setup through to live HTTP/HTTPS verification
- Manage SSL/TLS certificate provisioning, renewal automation, and domain binding
- Conduct full performance testing for each hosted site — page load, load response, uptime stability, and bottleneck reporting

3. GitHub Enterprise CI/CD Integration

- Connect server infrastructure to the IQ HUB GitHub Enterprise Cloud account, enabling automated CI/CD pipelines via GitHub Actions
- Design, maintain, and optimise deployment workflows for approximately 500 websites per year
- Implement branch protection rules, deployment gates, and rollback procedures
- Coordinate with frontend and backend development teams on pipeline triggers, environment variables, and secrets management

4. Cloudflare Integration & Domain Management





- Integrate Cloudflare on all applicable domains for CDN, DDoS protection, WAF rules, and DNS management
- Manage DNS records, domain propagation, and nameserver configurations across all active websites
- Implement Cloudflare Page Rules, Cache Rules, and Workers where required
- Maintain domain renewal schedules and registrar coordination to prevent expiry incidents

5. Monitoring, Uptime & Incident Response

- Configure and maintain BetterUptime monitoring — 60-second check intervals as standard
- Set up alerting, on-call escalation paths, and incident response runbooks
- Provide 24×7 on-call availability for critical server and infrastructure incidents
- Respond to and resolve production incidents within agreed SLA windows with full post-incident documentation

6. Database Connectivity & Backup

- Manage PostgreSQL connectivity, connection pooling, and credential rotation
- Configure and maintain Backblaze B2 automated daily database dumps with retention policies and restore testing
- Execute server and database migrations with zero-downtime strategies and rollback plans

7. Security Hardening & Firewall Management

- Conduct routine security hardening — SSH key-only access, fail2ban, intrusion detection, port auditing, and vulnerability scanning
- Manage secrets, API keys, and credentials through secure vaulting practices

8. GDPR Compliance & Data Protection





- Ensure EU servers comply with GDPR data residency requirements at the infrastructure level
- Implement and validate Google Consent Mode v2 technical prerequisites on hosted event and marketing websites
- Maintain server-level audit logs and access controls aligned with GDPR Article 32 technical safeguards
- Support GDPR audit responses related to data flows, retention, cross-border transfers, and processor records

9. AI-Assisted Deployment & Automation

- Leverage AI-powered tools (including Claude Code or equivalent) for automated deployment pipelines and infrastructure-as-code generation
- Build and maintain automation scripts for provisioning, health checks, certificate renewals, and backup verification
- Identify and implement opportunities to reduce manual toil through AI-assisted monitoring and incident triage

Educational Background

!

MANDATORY

REQUIRED QUALIFICATION

Degree in Computer Science, Information Technology, Computer Engineering, or a closely related technical discipline

Technical Knowledge & Required Skills

Infrastructure & Linux

- 3-6 years of hands-on Linux server administration (Ubuntu/Debian preferred)
- Proven experience with self-hosted PaaS platforms — Coolify, Dokku, CapRover, or Portainer
- Robust proficiency in GitHub Actions CI/CD pipeline design and GitHub Enterprise Cloud administration

Cloud, CDN & DNS

- Cloudflare configuration — DNS, WAF, CDN, DDoS mitigation, Page Rules, and Workers
- Domain management — DNS records, registrars, propagation troubleshooting
- SSL/TLS certificate management — Let's Encrypt, Certbot

Database & Backup

- PostgreSQL administration — connectivity, performance tuning, backup and restore
- Backblaze B2 or equiva

📌 IT Server & Infrastructure Specialist (Vadodara)
🏢 IQ - Hub
📍 Vadodara