This is a remote position. We are seeking an experienced and highly capable Mid-Level DevOps & Infrastructure Engineer to take full ownership of our DigitalOcean and RunCloud server infrastructure. You will join us at a critical time to lead security remediation immediately and bulk cleanup efforts. Over your first few months, your primary focus will be auditing dozens of servers, identifying and blocking malware entry points, cleaning infected sites, migrating sites to isolated system users, and setting up Cloud-flare Once the initial security cleanup is complete, your workload will shift heavily from defensive server management to proactive automation, deployment engineering, and scaling our infrastructure standardisation efforts. You will work closely with the leadership team, serving as our subject-matter expert to address infrastructure aspects we may not have considered.

Requirements

Immediate & Defensive Management (First Few Months) Immediate Security Action: Execute bulk cleanups and implement all internal security measures. Infrastructure Auditing & Remediation: Audit dozens of servers to identify vulnerabilities, clean infected sites, and isolate environments by migrating sites to isolated system users. Network Security: We will set up and configure Cloudflare across all domains. Cleanup & Stabilization: Clean up the existing infrastructure using a known list of issues and write initial automation scripts to remediate the issues. Day-to-Day Server & Environment Management Morning Check-ins: Review monitoring dashboards daily for offline sites, high CPU loads, or out-of-memory (OOM) errors. Security Reviews: Check firewall logs and malware scanner reports regularly for newly blocked threats. Routine Patching: Run controlled, automated updates for WordPress core, themes, and plugins across dozens of sites using WP-CLI scripts. Client Requests: Provision new servers, migrate new client sites to the infrastructure, and set up SSL certificates. Service Optimization: deep dive into the slowest sites to optimize base queries or adjust caching rules. Access Control: Set up and manage a secure team access control environment. Monitoring: Monitor services running on the cloud and ensure system health. Proactive Automation & Long-Term Strategy Infrastructure Strategy: Decide how to manage the infrastructure moving forward compared to its current state. Establish a standard setup overall and orchestrate tailored solutions for different clients. Long-Term Security: Implement standard, long-term security measures and policies. Automation Engineering: Automate server management workflows. Write bash and WP-CLI scripts to update plugins across tons of sites simultaneously and automate the cleanup of bloated databases (revisions, transients). Alerting & Uptime: Set up external uptime monitoring (e.g., UptimeRobot) and server metric alerts for CPU/RAM spikes. Cloud & Tooling Setup: Assist with cloud-related automation setups and comfortably configure open-source tools (like n8n) directly on servers. DevOps Support: Support development teams by applying expertise across development and operations, specifically focusing on scalability, automation, and system security. Scaling: Ensure the infrastructure is fully ready to scale to meet our growing requirements. ​ Expected Experience & Qualifications Experience: 4+ years of proven experience in a DevOps, SysAdmin, or Cloud Engineering role. Core Linux, IaaS & Cloud Platforms: Solid Linux administration (Ubuntu preferred) and shell scripting (Bash). Strong "IaaS and Linux VPS" experience (AWS or DigitalOcean or similar), alongside hands-on experience with major cloud platforms (AWS, Microsoft Azure, or GCP). You should know how to configure Nginx, manage SSH keys, and troubleshoot CPU spikes. Web Servers & Networking: Deep experience with NGINX, SSL certificate management, DNS, load balancing, and general networking/security concepts. CI/CD Pipelines: Familiar with building, testing, deploying, and rolling back pipelines using tools like GitHub Actions, Jenkins, GitLab YAML, etc. Database Management: Familiarity with database systems such as SQL, MySQL, etc. Diagnostics: Excellent diagnostic and troubleshooting skills across infrastructure, applications, and containers. Scripting: Highly comfortable writing scripts to automate routine workflows on the server. Soft Skills: Good communication and problem-solving skills, with a keen awareness of industry standards and market trends. Good to H