DevSecOps Engineer
About the role
This role involves securing and managing bare-metal and virtualized server infrastructure operating in data center environments, designing secure multi-tenant network architectures, and ensuring compliance with financial industry security standards. You will be responsible for container orchestration security, database security implementation, and building monitoring and incident response systems.
Key responsibilities
Perform security hardening on physical servers, VMs, and hypervisor platforms (such as Proxmox VE) operating in colocation data centers
Design secure multi-tenant network architectures, configure routing, and maintain firewalls (such as OPNsense or other enterprise hardware) with network segmentation (VLAN/DMZ)
Ensure all infrastructure meets financial industry security standards (PCI-DSS, ISO 27001, Bank Indonesia and OJK regulations), including Hardware Security Module (HSM) implementation if required
Audit and secure container-based environments running on company bare-metal infrastructure
Implement RBAC, encryption, and threat monitoring on production database clusters (such as PostgreSQL)
Build and manage IDS/IPS systems, SIEM, centralized logging systems, secure data backup paths, and execute technical incident response for potential security incidents in the data center
About you
Minimum 3-5 years of experience in System Administration, DevOps, or Security Engineering with primary focus on on-premise/bare-metal infrastructure
Experience in installation, network configuration, and hardware server placement in data centers
Deep understanding of network technology stack (TCP/IP, BGP, VPN, IDS/IPS) and firewall management
Proficiency in using and securing Linux operating systems (Ubuntu/Debian/RHEL) and container management platforms
Security-first mindset in maintaining system availability (High Availability) for 24/7 transactions
Experience managing physical network devices (switches/routers) and understanding server power resilience or other hardware resilience is a plus
Background in Fintech, Payment Gateway, or banking industry is highly desirable