IT Systems Administrator / DevOps Engineer İş İlanı

Back ‹ All jobs IT Systems Administrator / DevOps Engineer Full-time Ankara, Turkey We are seeking a senior IT Systems Administrator / DevOps Engineer to design, operate, and harden our on-prem and hybrid infrastructure. This role owns the end-to-end lifecycle of networking, secure remote access, Linux server operations, storage, backups/DR, observability, and artifact/package distribution. You will be hands-on: building reliable systems, automating repetitive work with Python/Bash, enforcing security baselines, operating firewalls, and collaborating closely with engineering teams to keep services performant and resilient. Responsibilities Network, Edge, and Firewalls (Routing/Switching/VPN) Deploy, configure, and maintain MikroTik/Cisco routers, L3 switches, and VPN solutions (including WireGuard). Own firewall operations across edge and internal segments: policy design, rule lifecycle, NAT, segmentation, logging, and controlled change management. Design VLANs, routing, ACLs, and segmentation to support production, lab, and office networks. Troubleshoot network performance/connectivity using packet captures, flow/log analysis, and structured diagnostics. Internal / Core / External Network Architecture & Secure Access Plan and implement internal/DMZ/external network architecture with explicit trust boundaries and clear routing/firewall policy. Design and operate bastion/jump server patterns (least privilege, auditable access, session controls). Own SSH access patterns: ssh_config, key policies, ProxyJump/ProxyCommand, and secure tunneling. Implement secure RDP access patterns (gateways, restricted exposure, policy controls). Protocols, Reverse Proxy, and TLS Apply strong fundamentals in TCP/UDP, HTTP/S, WebSockets, NAT, MTU, and timeouts/retries. Own IPv4 address management (subnetting, DHCP/DNS integration, static allocations). Deploy and operate Nginx reverse proxy/load balancing; health checks, routing, headers, rate limiting. Implement TLS/SSL best practices: certificate issuance/renewal, cipher policy, mTLS where appropriate. Sysadmin & Infrastructure Operations Administer Linux systems: provisioning, patching, package management, service supervision, tuning, log management. Manage server hardware and secure out-of-band access (IPMI). Manage storage: RAID selection, monitoring, rebuild workflows, performance trade-offs. Lead capacity planning, lifecycle management, inventory, and standard operating procedures. Data, DR, and Reliability (SRE) Operate databases with HA/DR mindset: hot/cold standby, replication, backups/restores, and failover playbooks. Own snapshots and DR planning: RPO/RTO definition, periodic restore tests, DR drills, and runbooks. Support reliability practices: SLIs/SLOs, alerting hygiene, incident response, postmortems. Deploy/operate object storage and integrate with backup/retention and artifact workflows where applicable. Artifactory, Registries, and Mirrors (Supply Chain & Availability) Deploy, operate, and maintain a central artifact repository. Build and manage repository mirrors/proxies to improve availability, performance, and supply-chain control, including common ecosystems such as: Docker registry proxying/caching (Docker Hub, GHCR, etc.) APT/YUM package mirrors and internal repositories PyPI/NPM/Maven/Go module proxying (as applicable to the org) Define retention, cleanup, and storage tiering policies for artifacts; manage quotas and growth forecasting. Implement access control (RBAC), audit logging, and signing/verification practices where applicable. Integrate Artifactory with CI/CD pipelines for publish/pull workflows, immutability, promotion, and traceability. Design mirror strategy for constrained/air-gapped or unreliable internet environments (fallbacks, sync windows, verification). Containers & CI/CD Operate Docker/Docker-Compose services with clean patterns for config, secrets, logging, and upgrades. Manage Portainer (or equivalent) with RBAC, approvals, and auditability. Support CI/CD fundamentals: runners/agents, artifact pipelines, environment promotion, safe deployment practices. Security, Hardening, and Controlled Pentest Activities Implement security baselines: OS hardening, firewalling, secure remote access, secrets handling, patch/vulnerability management. Manage Nitrokey/Yubikey workflows (enrollment, rotation, revocation, recovery). Support or integrate HSM solutions for key custody and sensitive cryptographic operations. Perform authorized internal security assessments: exposure review, config/access-control review, vulnerability scanning in controlled environments, TLS posture checks; write findings with remediation steps and validate fixes. Observability Implement metrics/dashboards via Prometheus and Grafana; define actionable alerts and SLO-oriented views. Operate ClickHouse where required for high-volume telemetry/analytics and retention. Automation & Documentation Automate operations with Python and Bash (provisioning, audits, backups, checks, incident tooling). Maintain diagrams/runbooks: networks, firewall policies, access procedures, DR plans, and change logs. Collaborate effectively with software teams, security stakeholders, and technicians. Minimum Qualifications Bachelor’s degree in Computer Engineering (or equivalent). 5+ years in sysadmin, network operations, and/or DevOps/SRE roles. Strong Linux administration skills; proficiency in Python and Bash scripting. Networking fundamentals (TCP/UDP/HTTP(S)/WebSockets), IPv4 subnetting/routing, and troubleshooting tooling. MikroTik/Cisco routers, L3 switching, and VPN experience (WireGuard preferred). Firewall operations experience (policy, NAT, segmentation, logging, safe change practices). Nginx reverse proxy + TLS/SSL certificate management experience. IPMI, RAID/storage operations, hardware lifecycle and capacity planning. Docker/Docker-Compose and CI/CD fundamentals. Strong documentation and incident response discipline. Preferred Qualifications Experience designing segmented network architectures, DMZ patterns, and bastion/jump host workflows. Hands-on experience operating Artifactoryand implementing mirrors/proxy repositories across multiple ecosystems (Docker/APT/YUM/PyPI/NPM/Maven/Go). Security mindset: hardening, secrets management, MFA/hardware keys, and audit readiness; experience with internal security assessments and remediation tracking. DB HA/DR depth: standby/replication, snapshot workflows, restore testing, and DR drills. Object storage experience and integration into backup/artifact pipelines. SRE practice: SLIs/SLOs, alert design, on-call workflows, postmortems. Observability depth: Prometheus/Grafana and ClickHouse operations/tuning. HSM integration and key management process ownership. Benefits Competitive salary and a comprehensive benefits package, including health insurance and fuel support. Continued support for candidates currently enrolled in a master's or doctoral program in a related field. Opportunities for continuous professional growth and skill development. Engage in a collaborative and innovative work environment. Enjoy a positive and enriching work environment, situated in a desirable location. Apply Here Required fields First name* Last name* Email address* Phone number* Linked in profile* Resume* Upload a file or drag and drop PDF, DOCX, DOC Email to a friend Share on LinkedIn Share on Twitter Powered by