# Job Description: DevOps Engineer – Linux, CI/CD, Docker & Sophos Firewall

Experience: 3–5 Years
Location: Malad ( w) , Mumbai.
Employment Type: Full-Time

Email : [email protected]

Candidates from the Western suburbs of Mumbai are preferred. From Marine lines to Virar

## Key Responsibilities

### 1. Linux Server Administration
- Install, configure, manage, and troubleshoot AlmaLinux, RHEL, CentOS, and other Linux servers.
- Manage users, groups, permissions, SSH access, sudo privileges, and password policies.
- Configure services, systemd, networking, DNS, firewalls, storage, LVM, and disk management.
- Perform server patching, security hardening, vulnerability remediation, and system updates.
- Monitor CPU, memory, disk utilization, logs, and system performance.
- Configure backup, recovery, log rotation, and disaster recovery procedures.
- Troubleshoot production issues and maintain system availability.

### 2. CI/CD and DevOps
- Design, configure, and maintain CI/CD pipelines using GitLab CI/CD, Jenkins, or similar tools.
- Manage Git repositories, branches, merge requests, access permissions, and deployment workflows.
- Automate build, testing, release, and deployment processes.
- Implement secure handling of credentials, tokens, secrets, and deployment keys.
- Manage development, staging, and production deployment environments.
- Troubleshoot pipeline failures and deployment issues.
- Implement Infrastructure as Code and configuration management using Ansible or similar tools.

### 3. Docker and Containerization
- Build, deploy, and manage Docker containers and images.
- Write and optimize Dockerfiles and Docker Compose configurations.
- Manage container networking, volumes, registries, and environment variables.
- Implement secure container image practices, vulnerability scanning, and image updates.




- Troubleshoot container startup, networking, resource utilization, and application issues.
- Support containerized application deployments and orchestration platforms where required.

### 4. Sophos Firewall Administration
- Configure and manage Sophos XG/XGS firewalls and Sophos Firewall OS.
- Create and maintain firewall rules, NAT policies, routing, and access control policies.
- Configure site-to-site IPsec VPNs and remote-access VPNs.
- Implement IP and country-based restrictions, web filtering, and application control.
- Configure IPS, malware protection, SSL/TLS inspection, and security policies as applicable.
- Investigate firewall logs, blocked traffic, suspicious connections, and security incidents.
- Troubleshoot connectivity between application servers, databases, users, and external payment or service providers.
- Maintain firewall configuration backups, firmware updates, change records, and audit evidence.
- Follow security best practices and applicable compliance requirements.

### 5. Security, Monitoring and Compliance
- Implement Linux security hardening and least-privilege access controls.
- Monitor server and firewall logs and investigate security alerts.
- Support vulnerability assessments, penetration tests, and remediation activities.
- Maintain audit evidence for firewall configurations, access controls, patching, and log retention.




- Support PCI DSS or other applicable information security compliance requirements.
- Configure monitoring and alerting using tools such as Zabbix, Prometheus, Grafana, or similar platforms.

### 6. Troubleshooting and Documentation
- Diagnose infrastructure, network, SSL/TLS, application deployment, and connectivity issues.
- Coordinate with development, network, database, and information security teams.
- Maintain infrastructure diagrams, operational procedures, change records, and incident reports.
- Participate in production support, incident management, and root-cause analysis.

## Required Technical Skills

- Strong hands-on experience with Linux administration, preferably AlmaLinux/RHEL.
- Practical experience with Git and GitLab CI/CD or Jenkins.
- Hands-on experience with Docker and container management.
- Working knowledge of Sophos XG/XGS Firewall administration.
- Strong understanding of TCP/IP, DNS, HTTP/HTTPS, SSH, routing, NAT, VPN, and SSL/TLS certificates.
- Experience with Bash scripting and automation.
- Knowledge of Apache HTTP Server, Nginx, or Tomcat.
- Experience with monitoring, troubleshooting, backup, and disaster recovery.
- Understanding of security hardening, vulnerability management, and access control.

## Preferred Skills
- Kubernetes and container orchestration.
- Ansible, Terraform, or other Infrastructure as Code tools.
- MySQL or PostgreSQL administration.
- Wazuh, SIEM, centralized logging, and endpoint security.
- Cloud platforms such as AWS, Azure, or Google Cloud.
- PCI DSS compliance and security audit support.

Education

PG: Any Postgraduate

Job Type: Full-time

Pay: ₹45,000.00 - ₹80,000.00 per month

Advantages:

- Health insurance
- Life insurance

Experience:

- total work: 5 years (Preferred)

Work Location: In person

📌 DevOps Engineer – Linux, CI/CD, Docker & Sophos Firewall (Malad)
🏢 Payment Gateway Solution
📍 Malad