Digiboxx – India’s first storage and asset management platform is looking for a dynamic and self-motivated SRE-3 (Senior DevSecOps Engineer). If you are passionate about using technology to make a difference and want to be part of an organization where dreams take flight, ideas turn into innovations, and every goal achieved is celebrated then Digiboxx is the place for you.
The vision of Digiboxx is to provide trusted and easy digital storage for everyone at an affordable price. We are looking for someone who is fun and inspiring to work with and who would like to be a part of our vision.
We are looking for a SRE-3 (Senior DevSecOps Engineer), you will play a key role in designing, automating, and securing our infrastructure. This role seamlessly integrates DevOps, Infrastructure Engineering, and Security — ensuring robust systems that are efficient, automated, and resilient against evolving threats.
Essential Duties and Responsibilities:
Infrastructure Automation & Management:
- Design, build, and automate infrastructure using Terraform and Ansible, ensuring modularity, scalability, and version control.
- Manage production-grade Linux servers (RHEL, Ubuntu, CentOS) ensuring uptime, performance tuning, and proactive patching.
- Administer and optimize MinIO object storage clusters, including replication, distributed setup, identity management, encryption, and load balancing.
- Deploy and operate systems on private cloud platforms such as VMware, Proxmox, or OpenStack, maintaining high availability and scalability.
- Drive automation and process improvements in both DevOps and security operations to enhance speed, accuracy, and reliability.
Advanced Linux & Networking:
- Manage and optimize network typologies, VLANs, firewalls, DNS/DHCP, VPNs, and routing configurations.
- Troubleshoot complex network performance and security issues (packet captures, TCP tuning, MTU optimization, NAT traversal, etc.).
- Implement high-availability network setups and secure access policies across multi-data center environments.
Security & Penetration Testing:
- Perform manual and automated penetration tests across infrastructure, APIs, and applications using tools like Burp Suite, Metasploit, Nmap, Netsparker, OWASP ZAP, and Fortify.
- Conduct MinIO and API-level security assessments, focusing on S3-compatible authentication, ACLs, and access key handling.
- Build and maintain a dedicated security lab to simulate zero-day attacks, container escapes, and privilege escalations.
- Create custom exploits and payloads to test real-world scenarios and develop remediation strategies.
- Collaborate with engineering teams to close vulnerabilities, enforce security baselines, and integrate continuous security in CI/CD pipelines.
Observability & Operations:
- Implement centralized logging, metrics, and alerting (Prometheus, Grafana, Loki, ELK, or equivalent) to achieve proactive incident detection.
- Develop and maintain runbooks, automation scripts, and self-healing mechanisms for production incidents.
- Perform regular chaos and stress testing to validate resilience and recovery processes.
Collaboration & Documentation:
- Work closely with development, infrastructure, and security teams to design secure, scalable architectures.
- Maintain up-to-date documentation for systems, security configurations, and operating procedures.
Required Skills and Experience:
- Bachelor’s/Master’s degree in Computer Science, Information Technology, or Engineering.
- Minimum 4 years of experience in DevOps, Infrastructure, and Security Operations.
- Strong hands-on experience with Terraform and Ansible in live production environments.
- Expertise in Linux system administration (RHEL, CentOS, Ubuntu) with a deep understanding of networking fundamentals (DNS, DHCP, VLANs, VPNs, Firewalls).
- Proven experience managing private cloud environments such as VMware, Proxmox, or OpenStack. Strong scripting abilities in Bash, Shell, or Python for automation of infrastructure and security processes.
- Experience with penetration testing tools such as Kali Linux, Metasploit, Burp Suite, Netsparker, and Fortify.
- Excellent analytical, communication, and problem-solving skills with a proactive mindset.
- Preferred certifications: OSCP, OSWP, OSEP, OWSA, OWSE, CEH Master.
Why DigiBoxx?
- Opportunity to work on a Swadesi world-class product
- Immense learning and growth opportunities with highly experienced leaders
- Choose your work location (Work from anywhere)
- Flexible working hours
- Exciting pay packages
- Top-notch office infrastructure in Mumbai and Delhi
Please note: What is stated under the “Roles & Responsibilities” is only indicative, not exhaustive. The Management reserves the right to add/delete/amend the roles & responsibilities at the discretion of the Company.