Network Engineer

We are looking for a hands-on System & Network Administrator to independently manage and maintain our office IT infrastructure, servers, switches, firewalls, access control systems, surveillance, Wi-Fi, and Docker-based application hosting. This is a solo infrastructure role with full ownership.

Key Responsibilities

Networking (Day-to-Day)

• Maintain LAN/WAN connectivity across switches, APs, and servers
• Manage DHCP reservations, DNS blocking, and static IP assignments
• Configure and troubleshoot Cisco SG500 managed switches (VLANs, port security, trunking)
• Monitor bandwidth usage and enforce website blocking policies (iptables, ipset, dnsmasq)
• Manage Wi-Fi access points (Ubiquiti UniFi, Linksys)
• Troubleshoot speed issues, cable faults, and device connectivity

Server Administration

• Manage Ubuntu 22.04/20.04 servers (patching, upgrades, user management)
• Maintain Docker containers (GitLab, PostgreSQL, MySQL, Redis, monitoring tools)
• Manage cron jobs, log rotation, disk monitoring, and backup scripts
• Handle SSL certificates, fail2ban, and SSH hardening
• Monitor server health (CPU, RAM, disk, temperature)

Security & Compliance

• Maintain firewall rules (iptables, DOCKER-USER chain, ipset)
• Enforce website/VPN blocking during office hours
• Manage access control systems (ZKTeco — enrollment, door schedules, logs)
• Review and respond to fail2ban alerts and intrusion attempts
• Ensure no unauthorized devices on the network (rogue device detection)

Required Skills

Must Have

• Linux — Ubuntu/Debian server administration (CLI-proficient, not GUI-dependent)
• Networking — Subnetting, VLANs, DNS, DHCP, NAT, firewall rules (iptables/nftables)
• Docker — Run, manage, troubleshoot containers and compose stacks
• Cisco switches — Basic managed switch configuration (SG300/SG500 or equivalent)
• Bash scripting — Write and maintain monitoring/automation scripts
• SSH & remote management — Comfortable managing headless servers remotely
• Cable management — Can trace, crimp, and test Ethernet cables

Good to Have

• Experience with Ubiquiti UniFi ecosystem
• ZKTeco/eSSL access control administration
• Uniview or Hikvision NVR/camera systems
• Monitoring tools (Grafana, Prometheus, Zabbix, Nagios)
• Basic understanding of Git (we host GitLab internally)
• AWS/cloud basics (S3, EC2) — for future migration planning
• CCNA or equivalent networking certification

Work Environment

• Solo IT infrastructure role — you own everything
• Direct access to server room — hands-on hardware work expected
• Reporting to technical leadership who understands infrastructure
• Occasional after-hours work for maintenance windows (patching, upgrades)

What We Offer

• Full ownership of infrastructure — no bureaucratic red tape
• Modern tooling (Docker, GitLab, automated monitoring)
• Budget for hardware upgrades and new equipment
• Learning opportunities in DevOps, cloud migration, and security
• Standard benefits (health insurance, PF, leaves)