Job Summary
Brief Description
About the Role:
We are looking for a 5+ years experienced DevOps and Infrastructure Engineer with strong networking fundamentals and hands-on BGP and IP configuration experience. You will manage and scale multi-cloud and on-premise infrastructure for our Kubernetes-native WAF/WAAP platform. The role also covers Linux and Windows server administration and support for enterprise customer deployments.
Key Responsibilities
Design, configure, and troubleshoot network infrastructure across cloud, data center, and customer environments.
Configure and manage BGP sessions (eBGP/iBGP), route advertisements, prefix filtering, route maps, and failover with upstream providers and peers.
Plan and manage IP addressing, including IPv4/IPv6 subnetting, CIDR allocation, VLANs, NAT, and static and dynamic routing.
Administer Linux servers (Ubuntu, RHEL/CentOS, Rocky): provisioning, hardening, performance tuning, and troubleshooting.
Administer Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, IIS, and patching.
Deploy and operate infrastructure on AWS, GCP, Azure, and private cloud: VPCs, VPNs, transit gateways, load balancers, and security groups.
Build and maintain CI/CD pipelines, Infrastructure as Code (Terraform/Ansible), and containerized workloads on Kubernetes.
Manage firewalls, VPN/IPsec tunnels, DNS, and load balancers such as HAProxy, NGINX, and cloud LBs.
Set up monitoring, logging, and alerting with Prometheus, Grafana, ELK, or similar tools.
Participate in incident response and root cause analysis, and provide L2/L3 support for enterprise customers.
Document network topologies, runbooks, and standard operating procedures.
Required Skills & Qualifications
Networking (core requirement)
Strong understanding of the TCP/IP stack and the OSI model.
Hands-on experience with BGP configuration and troubleshooting, including AS paths, local preference, MED, communities, and route filtering.
Working knowledge of OSPF, static routing, ECMP, and route redistribution.
Expertise in IP addressing, subnetting, VLANs, NAT/PAT, ACLs, and IPv6.
Experience with DNS, DHCP, VPN (IPsec/WireGuard/OpenVPN), and load balancing.
Familiarity with network devices and platforms such as Cisco, Juniper, MikroTik, pfSense, or Linux-based routing (FRR/BIRD).
Proficiency with troubleshooting tools: tcpdump, Wireshark, traceroute, mtr, iperf, dig, ss/netstat.
Systems Administration
5+ years of Linux administration, including networking (iproute2, iptables/nftables), systemd, and storage.
Solid Windows Server administration (AD, DNS, DHCP, GPO, PowerShell).
Cloud & DevOps
Production experience with at least one major cloud (AWS, GCP, or Azure); multi-cloud is a plus.
Cloud networking: VPC design, peering, Direct Connect / Cloud Interconnect / ExpressRoute, hybrid connectivity.
Docker and Kubernetes (k8s/k3s), including CNI networking (Calico, Cilium, Flannel).
Terraform, Ansible, and CI/CD tools (GitLab CI, GitHub Actions, Jenkins).
Scripting in Bash, Python, or PowerShell.
Preferred / Nice to Have
Certifications such as CCNA/CCNP, RHCSA/RHCE, AWS/Azure/GCP Associate or Professional, or CKA.
Experience with anycast, CDN, or DDoS mitigation architectures.
Exposure to WAF, web security, or the cybersecurity domain.
Soft Skills
Strong troubleshooting and analytical mindset under production pressure.
Clear communication with customers and cross-functional teams.
Ability to mentor junior engineers and own projects end to end.
Preferred Skills
Linux
AWS, GCP, or Azure
Docker and Kubernetes
Troubleshooting Tools: tcpdump, Wireshark, traceroute, mtr, iperf, dig, ss/netstat.