Security Engineer - (Reverse Proxy & Automation) - REMOTE

IBS-C

Ansprechpartner: Marco Fernando
luxembourg,  Luxemburg
100% RemoteFreiberuflichab sofortDauer 12 Monate100% Auslastung560,00 € Budget

Beschreibung

Job Description – L2 Engineer (Reverse Proxy & Automation)
Position Overview
We are looking for a Level 2 (L2) Engineer specialized in reverse proxy services (NGINX) and infrastructure automation. The role focuses on ensuring the reliability, performance, and automation of our reverse proxy platform while contributing to a DevOps-driven transformation.
You will work in a CI/CD-driven environment, tightly integrated with NetBox (CMDB), Ansible automation, and GitLab pipelines.
Key Responsibilities
Operations & Support (L2)
•
Handle incidents, requests, and problem management related to reverse proxy services
•
Perform root cause analysis and implement sustainable fixes
•
Support L1 teams with clear SOPs and escalation guidance
•
Ensure service availability, performance, and security compliance
Reverse Proxy Management
•
Configure and operate NGINX-based reverse proxy services
•
Implement:
o
URL routing and rewriting
o
SSL/TLS termination
o
Load balancing strategies
o
Security controls (headers, filtering, basic WAF logic apache/modsec)
•
Troubleshoot:
o
HTTP errors (4xx / 5xx)
o
Backend connectivity issues
o
Performance bottlenecks
Automation & DevOps
Sensitivity Label: General
•
Develop and maintain Ansible playbooks and roles
•
Automate:
o
NGINX configuration deployment
o
Service provisioning and updates
o
Integrate automation workflows with:
?
NetBox (source of truth)
?
GitLab CI/CD pipelines
?
Unit tests
•
Ensure compliance checks are enforced before deployments
CMDB & Data-Driven Infrastructure
•
Use NetBox as the central system of record
•
Maintain accurate:
o
Service definitions
o
Dependencies (consumer/producer model)
•
Contribute to data quality and automation consistency
CI/CD & Version Control
•
Work with GitLab for:
o
Source control
o
Merge requests and code reviews
o
CI/CD pipelines
•
Contribute to:
o
Automated testing (linting, validation)
o
Release management processes
Required Skills
Sensitivity Label: General
Core Technical Skills
•
Strong experience with NGINX (reverse proxy):
o
Routing, upstreams, SSL, debugging
•
Good knowledge of HTTP/HTTPS protocols
Automation & Scripting
•
Python (scripting, API interactions, tooling)
•
Ansible (playbooks, roles, automation design)
Infrastructure & Tools
•
Experience with NetBox (or similar CMDB / source of truth)
•
Strong experience with GitLab:
o
Git workflows
o
CI/CD pipelines
Troubleshooting & Operations
•
Solid understanding of:
o
Linux systems
o
Networking fundamentals (TCP/IP, DNS, TLS)
o
Ability to analyze logs and metrics
Nice to Have
•
Experience with:
o
Reverse proxy migration (e.g., Bluecoat ? NGINX)
o
Containerized environments (Docker / Kubernetes)
o
WAF technologies (ModSecurity or equivalent)
Sensitivity Label: General
•
Familiarity with:
o
ITIL processes (Incident, Problem, Change)
o
Monitoring tools (Prometheus, Grafana, Splunk)
Soft Skills
•
Strong analytical and problem-solving mindset
•
Ability to work in a DevOps culture (automation first)
•
Clear communication with L1, L3, and stakeholders
•
Ability to document and structure knowledge (SOPs, runbooks)
What We Offer
•
A modern DevOps environment with high automation maturity
•
Opportunity to work on:
o
Large-scale reverse proxy platforms
o
CI/CD and infrastructure-as-code transformation
•
A strong focus on:
o
automation
o
service standardization
o
continuous improvement
Typical Profile
•
3–7 years’ experience in system/network engineering or DevOps
•
Experience in production environments (L2/L3 support)
•
Strong interest in automation and service industrialization

Bewerben