Linux administrator

Job Description

Linux administrator

Linux System Administrator

We are seeking an experienced Linux System Administrator to manage, maintain, and optimize our Linux-based infrastructure. The ideal candidate will ensure the reliability, security, and performance of our server environments while supporting development teams and business operations with robust, scalable systems.

• Install, configure, and maintain Linux servers across multiple distributions (RHEL, CentOS, Ubuntu, Debian, SUSE)
• Manage physical, virtual Linux environments (VMware)
• Perform system updates, patches, and security hardening following best practices
• Configure and manage system services, daemons, and startup processes (systemd, init.d)
• Implement and maintain user account management, access controls, and sudo policies
• Monitor system performance, resource utilization, and capacity planning
• Manage disk storage, LVM, file systems, and partition schemes
• Configure and optimize kernel parameters and system tuning Server Infrastructure & Deployment
• Deploy and provision new Linux servers using automation tools and kickstart/preseed configurations
• Manage server lifecycle from provisioning to decommissioning
• Implement load balancing and failover mechanisms
• Manage virtual machine environments and hypervisors
• Optimize server performance through tuning and resource allocation

• Configure network interfaces, routing, VLANs, and bonding/teaming
• Manage firewalls using iptables, firewalld, or nftables
• Configure DNS, DHCP, and network services
• Implement VPN solutions (OpenVPN, IPsec, Wire Guard)
• Troubleshoot network connectivity and performance issues
• Configure SELinux/App Armor security policies
• Manage SSL/TLS certificates and key management

• Configure and manage local and network storage (NFS, CIFS/Samba, iSCSI)
• Implement RAID configurations and disk redundancy
• Manage logical volume management (LVM) and file system optimization
• Design and implement backup and recovery strategies
• Configure and maintain backup solutions (rsync, Bacula, Amanda, Veeam, Commvault)
• Perform regular backup testing and disaster recovery drills
• Manage data retention policies and archival strategies

• Implement security best practices and hardening standards (CIS benchmarks, STIG)
• Configure and manage authentication systems (LDAP, Active Directory integration, Kerberos)
• Implement SSH key management and secure remote access
• Configure intrusion detection/prevention systems (IDS/IPS)
• Perform regular security audits and vulnerability assessments
• Manage security patches and emergency updates
• Implement file integrity monitoring (AIDE, Tripwire)
• Configure audit logging and centralized log management
• Ensure compliance with security policies and regulatory requirements (PCI-DSS, HIPAA, SOC
  2)

• Implement comprehensive monitoring using tools like Datadog
• Configure alerting for critical system events and thresholds
• Monitor system logs using centralized logging solutions (ELK Stack, Splunk, rsyslog)
• Analyze system performance metrics (CPU, memory, disk I/O, network)
• Optimize system performance through kernel tuning and resource management
• Troubleshoot performance bottlenecks and resource contention
• Implement capacity planning based on growth trends

• Develop shell scripts (Bash, Python, Perl) for automation and task scheduling
• Develop monitoring scripts and health check utilities
• Automate backup and recovery procedures

• Install and configure web servers (Apache, Nginx)
• Manage application servers (Tomcat, JBoss, Web Logic)
• Configure reverse proxies and SSL/TLS termination
• Optimize web server performance and caching
• Implement log rotation and management
• Support development teams with server configurations

• Install and configure database servers (MySQL, Postgre
  
  SQL, Oracle)
• Perform basic database administration tasks and backups
• Monitor database server performance and resource usage
• Coordinate with DBAs for advanced database operations
• Implement database replication and high availability