Senior Database Administrator

Mid-level

Type of work: Remote

Open for candidates in Serbia, Bulgaria, Georgia, Armenia

About Virtuozzo
Virtuozzo is a leader in cloud infrastructure system software for AI. We offer an optimized operating system, orchestration, and management to service providers, SaaS companies, and the enterprise. Virtuozzo provides mainframe-like performance, reliability, and security while dramatically lowering overall cost and complexity. We combine deep engineering expertise with a relentless focus on performance, scalability, and innovation.

About The Role
We are seeking a mid-level Security Engineer to help protect Virtuozzo’s networks, systems, and data from cyber threats. You will work with global Virtuozzo team members, physical infrastructure, and SaaS systems. You will also play a hands-on role in our ISO/IEC 27001 certification program by operating security controls and producing evidence that demonstrates they are working effectively. You will join an existing team, adding capacity to help us continue supporting the needs of our growing global organization.

Responsibilities

• Operate and improve vulnerability management by running and tuning scans, triaging findings, tracking remediation with system owners, and maintaining scan evidence.
• Monitor security systems and logs, including SIEM and EDR platforms, to detect, investigate, and respond to security incidents.
• Maintain and configure security tooling, including EDR, SIEM, firewalls, intrusion detection and prevention systems, and MFA and SSO policies.
• Support identity and access management, including access provisioning, privileged access, and documented periodic access reviews.
• Contribute to ISO/IEC 27001 operations, including control implementation, evidence collection, risk register input, and support for internal and external audits.
• Assist with security assessments, penetration-test coordination, and remediation follow-up.
• Support application security across the software development lifecycle by integrating and operating SAST, DAST, dependency scanning, and container scanning within CI/CD pipelines.
• Triage application-security findings with R&D teams and track remediation.
• Help secure the build and release chain, including source-repository access, secrets management, artifact signing, and pipeline hardening.
• Help maintain security policies, procedures, and standards, and track exceptions.
• Track endpoint fleet security posture across Windows, macOS, and Linux, including MDM enrollment, EDR coverage, and disk encryption.
• Participate in security-awareness training and educate end users on security best practices.
• Troubleshoot security-related outages and incidents, producing root-cause or post-incident documentation where required.
• Work with the wider IT and Security team to build, document, and implement internal processes and workflows.
• Stay up to date with the latest security threats, trends, and technologies.

Required Qualifications And Experience

• At least three years of experience in security engineering, security operations, or systems administration with a strong security focus.
• Working knowledge of security concepts and tooling, including firewalls, IDS/IPS, SIEM, EDR, and vulnerability scanners.
• Solid networking fundamentals, including TCP/IP, VLANs, routing, VPNs, and firewalling, ideally with hands-on experience.
• Experience with identity and access management, including Active Directory or Microsoft Entra ID and SSO/MFA platforms such as Okta or similar.
• Working experience with Microsoft 365 and Exchange Online.
• Comfortable working with Windows, macOS, and Linux systems.
• Understanding of application-security fundamentals, including the OWASP Top 10, secure-coding practices, and vulnerability triage in code and dependencies.
• Understanding of security and compliance frameworks such as ISO/IEC 27001, SOC 2, or similar, including what constitutes suitable audit evidence.
• Strong problem-solving skills and attention to detail.
• Ability to work collaboratively within a team.
• Strong written and verbal communication skills in English.

The Following Would Be an Advantage

• Security certifications such as Security+, SSCP, CEH, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, or similar.
• Experience with Qualys, Greenbone/OpenVAS, Wazuh, Splunk, or similar tools.
• Experience with MDM tools such as Hexnode or similar, as well as endpoint hardening.
• Security automation experience using Python, Bash, or PowerShell.
• Hands-on experience with application-security tools such as SonarQube, Semgrep, Snyk, OWASP ZAP, Trivy, or similar.
• Experience with CI/CD security using Bitbucket Pipelines, Jenkins, or similar tools.
• Experience with secure-SDLC practices, including threat modelling, security code reviews, and secrets scanning.
• Exposure to cloud and virtualization platforms and their security models.
• Previous participation in an ISO/IEC 27001 certification program or customer security audits.

What We Offer

• A role at the forefront of cloud technology with real impact and growth opportunities
• A collaborative environment where your ideas are valued and shipped
• Other perks and engagement opportunities
• Share options
• Referral bonuses
• Certifications and learning opportunities in line with interest and role requirements

Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.
7M+ app downloads. 2M+ monthly active users. 7000+ partner stores. US$350M+ raised from top-tier investors.
Here, you get real ownership from day one, high standards, and direct communication. You'll work alongside a team that combines deep local knowledge and experience scaling regulated financial companies from scratch.
If you want to solve complex problems at scale and directly impact how millions of people access and manage money, come build with us.
Southeast Asia's fintech moment starts here.
About The Role
Tariff Services is expanding into Deposits, and we need QA coverage that keeps pace — validating tariff logic, rates, fees, limits, and calculations before they reach production.

What You'll Do

• Own test coverage for Tariff Services and Deposit-related tariff flows end-to-end: manual, automated, and regression.
• Work closely with developers, analysts, product, and DevOps to improve test environments, automation pipelines, and defect resolution.
• Test across APIs, databases, and backend integrations — validating data consistency, business rules, and edge cases for financially critical logic.

What You'll Own

• Design, maintain, and execute test cases for new tariff functionality and regression scenarios across Deposit and lending products.
• Build and expand automated test suites for critical tariff flows using Java or Kotlin.
• Validate tariff rules, rate calculations, fee structures, limits, conditions, and configuration changes.
• Analyze logs, database records, and system behavior to identify and document defects.
• Contribute to the test strategy and quality processes for a growing product scope.

What Makes You a Strong Fit

• 2+ years in QA automation or a similar backend-focused QA role.
• Strong hands-on experience with API testing — both manual and automated — using Java or Kotlin.
• Experience testing financial systems: deposits, tariffs, fees, billing, payments, or other transactional products.
• Solid understanding of integration testing, regression testing, and end-to-end backend scenarios.
• Experience writing and running SQL queries for data validation.

Our team is developing a payment gateway for accepting funds from users on behalf of merchants, as well as sending funds from merchants to users. The system involves storing user payment data and is subject to PCI DSS compliance. It contains multiple integrations with payment systems, providers, and other gateways and processors, including 3DS.

Job Responsibilities:

• Design, implement, and manage infrastructure with a focus on establishing security controls and ensuring secure configuration, in collaboration with DevOps.
• Automate cloud operations, ensuring all deployments and configurations conform to security baselines.
• Implement infrastructure security best practices such as IAM, network security, encryption, and monitoring.
• Develop and maintain CI/CD pipelines that integrate automated security checks such as SCA and SAST.
• Implement security monitoring and logging systems using services such as CloudWatch, CloudTrail, AWS Security Hub, and related tooling.
• Implement and manage security alerting mechanisms, ensuring timely detection of and response to security incidents.
• Apply security best practices in daily operations, including password management, phishing prevention, and security evaluation of new solutions.
• Conduct security assessments and periodic reviews as mandated by PCI DSS, ensuring continuous maintenance of processes such as vulnerability and change management.
• Manage and control access across various services.
• Prepare for and actively participate in PCI DSS audits, ensuring controls and evidence are in place.
• Collaborate with development, operations, and security teams to promote a culture of shared security responsibility across all stages of the system lifecycle.
• Train and advise team members on DevSecOps principles and secure engineering practices.
• Participate in task definition, estimation, and prioritization, and contribute to planning activities on weekly, monthly, quarterly, and annual horizons.
• Continuously optimize AWS infrastructure for security, performance, scalability, and cost efficiency.
• Maintain clear documentation and provide regular reports on security posture, audit readiness, and operational metrics.

Important and Challenging Tasks:

• Preparation for and participation in PCI DSS audits.
• Ensuring infrastructure compliance with high security standards.
• Continuous improvement and optimization of infrastructure and security processes.

Technology Stack:

• AWS (WAF, Shield, GuardDuty, Security Hub, KMS, Secrets Manager, Inspector, etc.)
• Kubernetes, Docker, Helm
• Terraform, Terragrunt, OpenTofu
• GitLab CI/CD
• SAML, SSO, MFA
• ELK Stack, CloudWatch, CloudTrail
• Linkerd

Job requirements

You’ll thrive here if you have:

• 3+ years of experience with Cloud infrastructure.
• Proficiency in DevSecOps tools and methodologies, including CI/CD, containerization (Docker), and orchestration (Kubernetes).
• Knowledge and application of security best practices in cloud environments, particularly AWS.
• Understanding of PCI DSS requirements and experience implementing and maintaining compliance in AWS.
• Experience implementing security controls and monitoring for AWS (AWS WAF, Shield, GuardDuty, Control Tower, Security Hub, CloudTrail Insights, KMS, CloudHSM, Macie, Secrets Manager, Inspector).
• Experience with logging and monitoring tools (AWS CloudWatch, ELK).
• Deep understanding of networking concepts and protocols, including VPNs, firewalls, and load balancers.
• Experience with security groups and IAM in AWS.
• Experience with Helm.
• Experience with SAML authentication configuration.
• Experience with SSO solutions.
• Knowledge of encryption techniques and key management.
• English proficiency at B1 level or higher.

Preferred Qualifications:

• AWS certifications (AWS Certified Solutions Architect, AWS Certified Security – Specialty).
• Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP).
• Experience implementing a DevSecOps culture within an organization.
• Knowledge of security champion programs and security training for development teams.
• Experience with Terraform / OpenTofu and Terragrunt.
• Knowledge of the CKS (Certified Kubernetes Security Specialist) certification program.
• Knowledge of GitOps (Helmfile / ArgoCD / FluxCD).
• Experience with service mesh (Linkerd).

Conditions

We know that great talent deserves great conditions, so here's what you can expect when joining us:

• EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family.
• EU passport. Opportunity to obtain an EU passport after 4 years of residence
• Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free.
• Provident fund (Cyprus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus.
• Transparent performance reviews twice a year, with bonus opportunities and salary adjustments.
• Private medical insurance for you and your family
• Corporate mobile plan (unlimited in Cyprus with roaming included)
• Mindfulness & well-being support, including psychological assistance with 50% coverage.
• 50% coverage of school and kindergarten fees for your children.
• Fully covered sports benefits, and also access to in-house electric scooters and bike rentals
• Professional growth support: language courses, conferences, training programs, and coaching.
• Peer recognition program: receive and share kudos for great work.
• A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration.
• Free breakfasts and lunches in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks.
• A strong engineering culture: international teams, corporate events, team buildings, and hackathons — because great work happens in great communities.

Recruitment process

• HR interview (40 min);
• Technical interview (1.5 hour);
• Final interview;
• Recommendations check;
• Job Offer.

About Lineate
Lineate is a US-based international software development company with over two decades of experience.

From Intelligent Document Processing(IDP) and Agentic RAG systems to scalable cloud architectures, we turn complex ideas into real, measurable results.

We deliver AI-driven custom solutions for FinTech, HealthTech, AdTech, and beyond, empowering businesses to grow smarter, faster, and more efficiently.

Our expertise falls into three main categories:

• Building Custom AI Solutions: Deploying high-impact, AI-enabled technology utilizing IDP, Agentic RAG.
• Cloud and Data Infrastructure: Optimizing business operations with our data management and cloud computing solutions.
• Team Augmentation: Providing specialized experts in FinTech, AdTech, and HealthTech to integrate seamlessly and accelerate project timelines.
• Our goal is not just to build technology, but to build the future operating model for our clients.

Role Summary
The Infrastructure Engineer is responsible for the reliability, security, and continuous improvement of Lineate and customer infrastructure across cloud and on-prem environments. The role combines hands-on SRE/DevOps work — automation, observability, incident response — with support engineering for production systems. The engineer is expected to operate independently on most tasks, and drive infrastructure and tooling improvements, including the use of AI agents to automate routine operational work

Accountable for

• Reliability, availability, and performance of Lineate and customer production systems in accordance with agreed SLOs and support SLAs
• Design, automation, and continuous improvement of cloud and on-prem infrastructure
• Timely and high-quality response to incidents and escalated support requests
• Security, compliance, and cost-efficiency of the infrastructure under the team's ownership
• Day-to-day operations of the infrastructure owned by the team

Main Responsibilities

• Participate in a 24/7 shift schedule
• Monitor systems and respond to automated alerts in line with Lineate support SLAs

Diagnose and resolve system problems

• Operate Kubernetes workloads and Databricks resources by following team playbooks and runbooks
• Perform routine system administration on Linux and Windows servers
• Respond promptly and professionally to customer inquiries via Slack, email, or Zendesk
• Document, categorize, and prioritize incoming support requests
• Communicate the status of open requests clearly and regularly to customers
• Identify and implement automation opportunities, including AI-agent-driven automation of routine operational tasks (ticket triage, runbook execution, log analysis, knowledge-base maintenance)
• Drive incident resolution by coordinating triage, implementing mitigation measures, conducting root cause analysis, and leading post-incident reviews
• Maintain and improve runbooks, playbooks, FAQs, and internal knowledge bases
• Implement and improve observability: metrics, logs, traces, dashboards, alerting, and SLO tracking
• Contribute to CI/CD pipelines and basic infrastructure automation
• Follow basic information security practices (IAM, secrets handling, least privilege)
• Participate in the improvement of support and infrastructure processes

Necessary Qualification
s:

• Minimum 3 years of hands-on Linux system administration experience (required)
• Minimum 2 year of hands-on experience with AWS in a production environment (required)
• Working familiarity with Kubernetes — able to operate workloads, read logs, and perform standard actions by following playbooks (deep cluster-design expertise not required)
• Working familiarity with AWS Databricks — able to run jobs, manage clusters, and troubleshoot using existing playbooks (deep platform expertise not required)
• Practical experience using AI agents / LLM-based tooling (e.g., Claude, ChatGPT, MCP-based agents, Cursor, Copilot) to automate operational, scripting, or support tasks
• At least 1 year of Windows system administration experience
• Practical scripting skills in at least one of Python, Bash, Go (1+ years of practical use)
• Ability to maintain existing pipelines in CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or equivalent
• Proficiency with Git and standard version-control workflows
• Hands-on experience with Docker and container workflows
• Experience managing and maintaining production IT infrastructure
• Comfortable working with a broad range of open-source technologies and tools

Preferred:

• Infrastructure as Code: Terraform (preferred), Ansible, or CloudFormation
• Observability stack: Prometheus, Grafana, ELK/Loki, Datadog, CloudWatch, or equivalent—including building dashboards and alerts
• Networking fundamentals: TCP/IP, DNS, HTTP(S), TLS, VPN, load balancers, VPC design ,basic firewall and routing
• Cloud security: IAM, KMS, secrets management (AWS Secrets Manager, HashiCorp Vault), least-privilege design, audit logging
• Database operations: PostgreSQL, MySQL, or Redis — backups, restores, basic tuning, monitoring
• Incident management practices: on-call rotations, runbooks, SLI/SLO/SLA, blameless postmortems
• Familiarity with data-platform concepts: Spark/PySpark basics, ETL pipelines (in the context of Databricks)
• Experience writing and maintaining MCP servers, prompt-based automations, or AI-driven runbooks is a plus

Exposure to GCP or Azure in addition to AWS

We offer

• Freedom to Develop - equal opportunity to learn and grow professionally
• Clear career and professional path, strong performance management system
• Social Benefits Package
• Equipment
• English lesson
• Gym membership
• All the advantages of working in an international IT company
• Flexible vacation time
• Fun and inclusive in-person and digital events

Lineate is proud to be an Equal Opportunity Employer - We do not hire on the basis of race, colour, religion, creed, gender, national origin, citizenship, age, disability, veteran status, marital status, pregnancy, parental status, sex, gender expression or identity, sexual orientation, or any other basis protected by Georgian legislation. All employment is decided based on qualifications, merit, and business ne
ed. Learn more about Lineate at our website: www.lineate.