System Administrator, DevOps and Infrastructure NEW

The System Administrator, DevOps and Infrastructure performs day-to-day administration of SGL’s infrastructure through maintaining, upgrading, managing and troubleshooting our software, hardware and networks.

Responsibilities

• Analyze, assess, and document on-premises physical server infrastructure requirements, oversee hardware and software installations, system monitoring, and preventive maintenance to ensure continuous availability of organizational systems;
• Design and implement log management and observability pipelines using tools such as Rsyslog, Loki, Vector, and Grafana;
• Develop information systems policies and procedures related to IT operations, including backup workflows, disk utilization assessments, and network share management across Windows and Linux environments;
• Assess and monitor infrastructure health metrics by developing system monitoring agents, integrating with directory services;
• Evaluate, deploy, and manage containerized services using Docker, and develop and maintain CI/CD pipelines in GitLab;
• Analyze requirements and design bare-metal Kubernetes clusters, including distributed storage (Ceph), networking, and load balancing solutions to support scalable and highly available systems;
• Assess existing workloads and provide recommendations for migration and consolidation onto container orchestration platforms, implementing monitoring, auto-scaling, and failover mechanisms to meet high-availability and business continuity requirements;
• Author infrastructure-as-code using Terraform/OpenTofu and Talos Linux for provisioning and managing Kubernetes cluster nodes in a reproducible, declarative manner;
• Develop and maintain identity and access management integrations;
• Build centralized IT management platforms/internal tooling (e.g., inventory, archiving, and media management systems) as containerized microservices deployed on Kubernetes;
• Design and operate access control reconciliation loops that enforce ACL state across systems based on authoritative directory sources;
• Develop automation for employee on-boarding and off-boarding workflows;
• Manage virtualization platforms including VMware vSphere and Proxmox VE for workload virtualization, VM provisioning, and resource allocation across the data center;
• Create custom container images for enterprise mail and groupware platforms, integrating CalDAV/CardDAV, LDAP authentication, and mail server monitoring;
• Maintain good records and documentation;
• Provide project status reports as required;
• Understand, comply with, and promote all company safety precautions and policies, including reporting hazards and incidents encountered during daily operations;
• Attend and complete training courses and/or company examinations, as required;
• Maintain a high level of technical and operational knowledge through direct engagement with colleagues, supervisors, and personal development;
• Maintain project schedules and design goals; and
• Perform and complete other duties as assigned.

Qualifications and Experience

• Postsecondary Degree or Diploma in computer science, related field or combined education and experience;
• Experience with Linux system administration and on-premises infrastructure management;
• Proficiency with containerization and orchestration technologies such as Docker and Kubernetes;
• Familiarity with CI/CD tooling, version control systems, GitOps workflows, and DevOps practices;
• Experience with infrastructure-as-code tools such as Terraform/OpenTofu;
• Experience with observability and monitoring tools (Prometheus, Grafana, Loki, Vector);
• Knowledge of networking concepts, directory services (LDAP, Active Directory, OIDC/SAML), database systems (MySQL/MariaDB, PostgreSQL), and distributed storage (Ceph);
• Experience with virtualization platforms such as VMware vSphere and Proxmox VE;
• Proficiency in Go, with additional experience in Python, TypeScript, and shell scripting;
• Experience building and maintaining custom container images and CI/CD pipeline templates;
• Experience with identity and access management, including OAuth2/OIDC, LDAP proxying, and SSO integrations;
• Knowledge of secrets management solutions such as HashiCorp Vault;
• Ability to obtain secret security clearance;
• Ability to produce thorough and effective technical documentation;
• Strong interpersonal, teamwork and communications skills; and
• Able to solve problems quickly and automate processes; and,
• Ability to establish priorities and multitask in a fast-paced environment.

Benefits

SGL is committed to promoting employee wellness and successful work-life balance. Employee benefits include (but are not limited to):

• Comprehensive benefits coverage including health, dental, vision, and paramedical;
• Life insurance;
• Paid vacation, personal leave, and medical leave;
• On-site gym; and
• On-site parking.