Platform Support Engineer

Platform Support Engineer (Dev Ops
· Security
· Voice & Messaging Support)

Sudonum runs a real-time communications platform: call tracking, number privacy, click-to-call, SMS and Whats App for clients across South Africa, the UK and Europe. When a call has to connect, it has to connect.

We're hiring one person to keep that platform healthy: the infrastructure it runs on, the security posture around it, and the customers who depend on it. This is a hands-on role with real ownership from day one, working directly with a small senior engineering team who will teach you the stack.

• Deploy and monitor our production Docker Swarm fleet on AWS (EC2, RDS PostgreSQL, Elasti Cache Redis, S3, SES)
• Keep the Celery queue estate healthy - spot backlogs, wedged schedulers and memory-hungry workers before customers do
• Run our ELK stack (Elasticsearch, Logstash, Kibana, Metricbeat) and our alert rules
• Triage Sentry errors, own the weekly systems-health review, and keep runbooks current
• Support CI (Git Hub Actions), staging deploys and database maintenance

• Own the Sentinel One EDR console - endpoint coverage, alert triage, escalation
• Run and act on Greenbone vulnerability scans; keep the scan targets accurate
• Own Git Hub security hygiene:
  Dependabot alerts, dependency upgrades, secret scanning, branch protection
• Maintain fail2ban, AWS WAF and firewall rules across the voice and SBC fleet
• Track penetration-test findings through to closure
• Tier 1–2 support for our Voice, SMS and Whats App products
• Investigate call-quality, routing and CDR issues across Free SWITCH/FusionPBX and our SBCs
• Chase SMS delivery and DLR problems with SMPP suppliers
• Provision numbers (DIDs), configure routing, transfer numbers between accounts
• Log and drive supplier tickets; keep customers and account managers informed

• 2+ years in a commercial Dev Ops, Sys Admin, NOC, SRE or technical-support engineering role — this is not an entry-level position
• Practical Docker experience; you can read a compose file and debug a container that won't start
• Working knowledge of AWS (EC2, RDS, S3, IAM, security groups)
• Enough Python to read Django code, run a management command and fix a small bug
• SQL good enough to answer a support question from the database
• Comfortable in Git and Git Hub
• Willing to carry an on-call phone on a shared rota
• You write clearly. Half this job is telling people what happened and what you did about it.

This platform carries live calls and messages, so it needs cover outside office hours. You join a shared after-hours rota with the engineering team. You are never the only person awake - every escalation path ends at a senior engineer, and you do not go on the rota until you have run production deploys unsupervised. A standby allowance applies for every week you carry the phone, and night work comes back to you as leave.

• VoIP / SIP exposure (Free SWITCH, Asterisk, Kamailio) or SMPP/SMS
• Elasticsearch / Kibana, Grafana or similar observability tooling
• Security tooling: EDR, vulnerability scanners, WAF, CIS hardening
• Ansible, Terraform or other IaC
• Any security certification (Security+, eJPT, AZ/AWS security) or a Linux cert (RHCSA, LFCS)

• Genuine ownership of production systems, not a ticket queue you can't influence
• Mentorship from senior engineers who will hand over the keys deliberately
• A stack broad enough to build a real career on: cloud, containers, telephony, security, data
• A clear growth path into Dev Ops/SRE or Security specialisation
• R35 000 per month plus a standby allowance; [medical/retirement/leave — confirm]
• Cape Town hybrid: 3 days in office for 6 months, then 1 day a week