DevOps Engineer

Job Description

We are looking for a DevOps Engineer to manage and secure our in-house infrastructure, automate deployments, and optimise our CI/CD pipeline. You will be responsible for server management, security enforcement, networking, and infrastructure automation.

Mission Statement 🚀

Our mission at Great Lab is to develop software that simplifies and enhances the daily operations of dental labs. By leveraging our expertise in .NET development, we aim to provide efficient and user-friendly solutions that empower dental professionals to perform their tasks seamlessly.

You can expect to be doing the following

Server & Infrastructure Management

• Manage and maintain Linux-based servers (Ubuntu, Debian, CentOS).
• Deploy and monitor on-premises servers, networking, and power systems.
• Implement high availability (HA) and failover strategies for critical services.
• Optimize server performance, storage, and backups.
• Maintain and scale a hybrid cloud setup (AWS, on-prem, and private cloud infrastructure).

CI/CD & Code Deployment Automation

• Build and maintain CI/CD pipelines using GitHub Actions, GitLab CI/CD, or Jenkins.
• Automate software deployments for web applications and internal tools.
• Maintain self-hosted CI/CD infrastructure (runners, deployment servers).
• Optimize rollbacks, blue-green deployments, and zero-downtime strategies

Security & Compliance

• Set up firewalls, access controls, and server hardening.
• Enforce SSH key-based authentication & disable root login.
• Implement intrusion detection (Snort, Suricata) & fail2ban for SSH security.
• Monitor system logs for suspicious activity and conduct regular security audits.
• Manage encrypted storage, VPN access (WireGuard/Tailscale), and private Git hosting.
• Authentication management w/ ensuring 2FA & other security improvement opportunities

Networking & Office IT Security

• Configure VLANs to separate office traffic from DevOps infrastructure.
• Server setup basics required & will have consulting advice
• Set up Wi-Fi segmentation (secure internal network vs. general office Wi-Fi).
• Implement real-time power monitoring (Smart PDUs, Energy Meter at the breaker panel).

Monitoring, Backups & Disaster Recovery

• Set up monitoring for servers and the network.
• Implement automated alerts (Slack, email) for CPU spikes, outages, and security threats.
• Maintain regular backups (AWS S3, on-prem NAS, offsite redundancy).
• Plan and test disaster recovery scenarios to minimise downtime.

Requirements

• 1+ years of experience in DevOps, Infrastructure, or System Administration.
• Strong experience with Linux (Ubuntu, Debian, CentOS) server management.
• Experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, or similar).
• Knowledge of networking (firewalls, VLANs, VPNs, BGP, routing).
• Familiarity with security best practices (SSH hardening, IDS/IPS, access control).
• Experience managing Docker, Kubernetes, or containerized environments.
• Comfortable managing physical hardware (rack-mounted servers, PDUs, UPS systems).
• Understanding of database administration (PostgreSQL, MySQL, or MongoDB).
• Experience with monitoring/logging tools (Grafana, Prometheus, ELK stack).

It’s a plus if you have

• Experience working with Hybrid Cloud (AWS, Proxmox, OpenStack, etc.).
• Hands-on experience with hardware setup & data center operations.
• Knowledge of DDoS protection, reverse proxies (Cloudflare, HAProxy, Traefik).
• Experience with energy monitoring & infrastructure scaling.

What's in it for you?

• A chance to build and manage an on-prem infrastructure from scratch.
• The opportunity to own security, networking, and server automation.
• A hands-on role in scaling our infrastructure and hybrid cloud setup.
• Work with a team that values security, automation, and fast deployments.
• Competitive salary and the chance to grow with the company.
• Location: On-site (Setúbal, Portugal)
• Full-time

‍