Job
- Level
- Erfahren
- Ort
- Berlin, Karlsruhe
- Arbeitsmodell
- Hybrid, Onsite
- Job Feld
- IT, Network, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
Job Zusammenfassung
In dieser Position verwaltest du Linux-basierte Abwehrsysteme gegen DDoS-Angriffe, betreibst komplexe Proxy-Strukturen und entwickelst Automatisierungslösungen, um Cyber-Bedrohungen in Echtzeit zu neutralisieren.
Job Technologien
Deine Rolle im Team
- Join our highly motivated team of experts dedicated to combating cybersecurity threats.
- As a System Administrator, you will plan and operate our cutting-edge defense platforms alongside site reliability engineers and network engineers.
- These platforms are crucial for protecting our hosting products and infrastructure, encompassing classic DDoS mitigation, modern Web Application Firewalls (WAF), Zero Trust strategies, and our Content Delivery Network (CDN).
- As an Specialist in our Defense squad, you act as a vital shield against daily DDoS and sophisticated cyber attacks.
- You are the first line of defense, dedicated to neutralizing threats through technical mastery and proactive mitigation.
- The day-to-day operations of the Defense Platform Services team directly correlate to the financial stability of the United Internet Group.
- When our defenders succeed, the group's digital economy remains fluid; your success is measured by the silence of a neutralized threat.
- Active Defense & DDoS Mitigation: Administer and troubleshoot scrubbing platforms and a complex, large-scale proxy infrastructure.
- You will engage in the "cat and mouse game" of fighting attacks in real-time-identifying, washing, and neutralizing malicious traffic to protect core cloud and fiber services.
- Architectural Density & Operational Excellence: You will manage the lifecycle of 800+ Linux-based components within a highly available infrastructure.
- To maintain 24/7 group-wide protection, this role requires a mandatory on-call service rotation of one week per month, ensuring immediate response to high-priority network threats.
- Innovation & Data-Driven Defense: We leverage modern AI tools for log analysis and pattern detection.
- You will bring creative ideas to the table, utilizing the ELK Stack and ClickHouse to manage high-volume telemetry, identify attack signatures, and devise advanced mitigation strategies.
- Lifecycle & Pipeline Management: Develop and optimize CI/CD pipelines in an agile DevOps environment.
- You will evaluate and integrate new technologies-including Docker and Kubernetes-to ensure our defense architecture remains lean, efficient, and ahead of evolving industry threats.
Unsere Erwartungen an dich
Ausbildung
- Because this role manages critical national and corporate infrastructure, the barrier to entry involves both technical mastery and a high degree of professional trust.
Qualifikationen
- We are looking for an administrator with a "security gene"-a specialized, proactive interest in DDoS mitigation and cyber defense that goes beyond standard system maintenance.
- Expert-level proficiency in managing complex, distributed Linux environments.
- Practical knowledge of BGP, Flowspec, and Anycast routing.
- A passion for eliminating repetitive tasks through Ansible, Puppet, and Python.
- Strong passion for automation using tools like Ansible, Puppet, and Python to eliminate repetitive manual tasks.
- Strong analytical skills to evaluate DDoS attacks, implement effective countermeasures, and continuously develop our defense platforms.
- Like us, you are a strong advocate for Open Source, especially Linux.
Erfahrung
- Therefore, we require 3 to 5 years of platform operating experience at scale.
- Proven experience configuring Nginx as a reverse proxy or Web Application Firewall (WAF).
- Several years of experience in the administration of complex, distributed Linux systems.
- Proven experience in configuring and operating Nginx as a reverse proxy or web application firewall.
- Hands-on experience with the deployment of BGP, Flowspec, and Anycast routing on Linux systems and network routers.
- Initial experience with technologies such as Docker, Kubernetes, ClickHouse, or the ELK Stack is beneficial.
Unser Angebot
- Hybrid working model.
- Flexible working hours through trust-based working hours.
- Subsidized canteen and various free drinks at select locations.
- Modern office space with excellent public transport connections.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous training and development opportunities.
- Various health offerings, such as sports and wellness courses.
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Berufliche Schulen Potsdam der ASG - Anerkannten Schulgesellschaft mbH
Die Beruflichen Schulen Potsdam der ASG ermöglichen eine praxisorientierte Ausbildung zum Erzieher, die schulische Theorie und berufliche Praxis eng miteinander verbindet. Ein kompetentes Dozententeam sowie regelmäßige Kooperationen mit Praxispartnern fördern die Vorbereitung auf pädagogische Berufe in der Kinder- und Jugendhilfe.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Bildungswesen
Linux System Administrator Defense Products
- Ort
- Berlin, Karlsruhe
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
