About the Job
We are seeking an experienced Infra Automation Engineer to join our IT Infrastructure Support team, responsible for ensuring the reliability, scalability, and performance of critical physical security infrastructure, including IP camera fleets, access control systems, and a large-scale Cisco switch fleet, and the servers, network, and cloud environment that support them. In this role, you will combine software engineering expertise with operations knowledge to build and maintain automation tools, a centralized CMDB, monitoring systems, and processes that support enterprise-grade server, network, and security device management within a large-scale, cloud-hosted enterprise environment. You will work closely with cross-functional teams to define and enforce service level objectives, reduce operational toil through automation, and drive continuous improvement in system resilience. This position requires 24x5 availability with on-call rotation to ensure uninterrupted support for mission-critical infrastructure.
What you'll do
Partner with leadership to establish, monitor, and enforce Service Level Indicators (SLIs) and Service Level Objectives (SLOs) for infrastructure tooling, including configuration compliance rates, patch success rates, and deployment latency metrics.
Provide Level 3 expertise for tooling-specific incidents, focusing on automating incident remediation workflows and reducing Mean Time To Repair (MTTR) through intelligent automation and runbook development.
Identify and automate repetitive manual tasks across managed infrastructure, targeting measurable reductions in operational overhead (e.g., 50% reduction in manual server build time) through scripting and workflow automation.
Conduct thorough root cause analysis and lead blameless postmortems for all major service-impacting incidents, driving systemic improvements in tooling reliability and infrastructure resilience.
Engineer and maintain automated processes and scripts to populate, update, and synchronize asset management platforms (e.g., NetBox), configuration management databases, and monitoring systems for internal and external stakeholders.
Design, develop, and deploy full-stack applications, custom plugins, and automation scripts to extend functionality of management and monitoring systems, enabling direct device interaction for configuration management.
Develop and maintain fully automated Infrastructure-as-Code configurations for Windows and Linux server roles using tools such as Ansible, Terraform, or Puppet, including drift detection and auto-remediation capabilities.
Build end-to-end automation pipelines for vulnerability patching, security baseline enforcement (CIS benchmarks), and continuous compliance auditing against internal and regulatory standards for physical security devices.
Develop API-driven tools for network configuration management, automated firmware updates, zero-touch provisioning, pre/post-change validation, and real-time network health monitoring across the device fleet.
Deploy and standardize monitoring agents, centralized log collection systems, and custom dashboards with alerts based on critical SLIs (latency, error rate, saturation, traffic) for servers and edge devices.
Build and maintain custom monitoring exporters for the physical security device fleet, including camera systems, ensuring accurate metrics and structured, multi-severity logging output.
Build diagnostic tooling to correlate timestamps across distributed log streams and detect clock drift or NTP desync, a recurring root cause of false-positive outages across the device fleet.
Build automation scripts for intelligent ticket handling, problem validation, and escalation workflows within enterprise ticketing systems, ensuring 2-hour initial response SLAs are consistently met.
Support foundational security improvements across the device fleet, including managed credential/access controls and automated configuration backup.
Participate in 24x5 on-call rotation to provide timely support for infrastructure systems, security devices, and related tooling, ensuring service continuity and rapid incident response.
Requirements
6+ years of experience in Infra Automation Engineering, or Infrastructure Engineering.
Strong proficiency in Python, Bash, and PowerShell for automation scripting, with experience in Go for building high-performance backend services and APIs.
Hands-on experience with Infrastructure-as-Code tools (Terraform, Ansible, Chef, or Puppet) and configuration management practices, including drift detection, version control, and automated remediation.
Advanced knowledge of Linux and Windows server environments, including Tier 3 troubleshooting capabilities, system hardening, and enterprise-scale server management.
Solid understanding of enterprise networking concepts, Cisco device administration, network automation protocols (NETCONF/RESTCONF), and experience with network monitoring and flow analysis tools.
Experience implementing and managing monitoring solutions (Prometheus, Grafana, Datadog) or comparable proprietary internal monitoring and metrics-streaming systems (e.g., Monarch, Streamz), and centralized logging platforms (ELK Stack), with ability to create custom dashboards and alerting rules.
Experience deploying and customizing a CMDB/IPAM platform (e.g., NetBox) as a source of truth for device inventory and downstream automation.
Comfort operating within a large-scale, cloud-hosted enterprise environment (Kubernetes, Terraform, Helm), including familiarity with internal development and code-review tooling (e.g., Cider, Critic) or comparable large-scale internal toolchains.
Experience writing and maintaining custom monitoring exporters/agents for edge/IoT and physical security devices, including structured, glog-style logging output.
Proficiency in advanced text-processing and scripting (e.g., awk/gawk) for log parsing and timestamp correlation, with working knowledge of NTP/clock synchronization practices.
Salary Range
50,640.00 - 63,300.00 EUR (Annual)Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.