Senior Infrastructure Analyst – Linux, AD, OPNsense/pfSense

ESSS

. Design, operate, and continuously improve IT infrastructure in a hybrid environment (on-premises and cloud), with a focus on availability, security, and automation .

Posted 11/3/2026full-timeFlorianópolis • BrazilSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and improving IT infrastructure in hybrid environments, with a strong focus on security, automation, and availability. Proficient in administering Linux and Windows servers, managing identity services, and implementing monitoring systems.

Highest-signal resume keywords

Linux AdministrationWindows Server ManagementCloud Resource AdministrationNetwork Security ManagementScripting and Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

RHEL-Like Linux DistributionsWindows ServerActive DirectoryTCP/IP NetworkingFirewall AdministrationCloud Platforms (GCP/AWS)Bash ScriptingPowerShell ScriptingVulnerability ManagementDatabase Administration (MySQL/MariaDB)

Soft Skills

MentoringTechnical Decision-MakingIndependent Work

Tools & Technologies

VMwareProxmoxHyper-VZabbixPrometheusGrafanaGLPIJira Service Management

Industry Keywords

IT InfrastructureHybrid EnvironmentIdentity and Access ManagementIncident ManagementAutomationMonitoring SystemsBackup StrategyNetwork Configuration

Tech Stack

Tools & technologies

ApacheAWSDNSFirewallsGoogle Cloud PlatformGrafanaITSMLinuxMariaDBMySQLNGINXPHPPrometheusPythonSQLTCP/IPVMware

About the role

Key responsibilities & impact

Design, operate, and continuously improve IT infrastructure in a hybrid environment (on-premises and cloud), with a focus on availability, security, and automation
Administer Linux and Windows production servers, including hardening, patching, and capacity planning
Manage identity and directory services, as well as the lifecycle of accounts and access privileges
Operate and enhance the corporate network, including firewalls, VPNs, VLANs, routing, and QoS
Administer cloud resources, with a focus on IAM, costs, networking, and backup
Maintain monitoring and alerting systems by defining metrics, thresholds, and incident responses
Lead vulnerability management and remediation efforts
Automate recurring tasks and standardize configurations using scripts, IaC, and pipelines
Document architecture, procedures, and runbooks
Handle Level 3 support tickets through ITSM systems
Participate in migration and upgrade projects, as well as evaluations of new technologies
Mentor mid-level and junior analysts
Work independently in technical decision-making, serve as a point of reference for the team, and take end-to-end ownership of critical incidents

Requirements

What you’ll need

Experience with and knowledge of RHEL-like Linux distributions (AlmaLinux/Rocky) and Debian/Ubuntu
Knowledge of systemd, LVM, and SELinux/AppArmor
Troubleshooting expertise in CPU, memory, I/O, and networking
Experience with Windows Server and Active Directory
Knowledge of GPO, DNS, DHCP, PKI/ADCS, and Linux–AD integration (SSSD/Kerberos)
Knowledge of TCP/IP, VLANs, static and dynamic routing, NAT, and VPNs (IPsec, WireGuard/OpenVPN)
Experience installing, upgrading, and administering OPNsense/pfSense firewalls in production environments
Knowledge of high availability using CARP and pfsync, traffic shaping, plugins, and troubleshooting
Experience with VMware, Proxmox, or Hyper-V
Hands-on experience with GCP or AWS, including IAM, VPC, compute, and storage
Knowledge of Zabbix, Prometheus/Grafana, or an equivalent solution
Fluency in Bash and PowerShell
Python is a strong plus
Knowledge of hardening (CIS), TLS certificates, vulnerability scanners, least privilege, and MFA
Knowledge of the 3-2-1 backup strategy, restore testing, and defining RPO/RTO
Knowledge of Nginx/Apache, PHP-FPM, MySQL/MariaDB, and SQL Server for basic administration and troubleshooting
Knowledge of ticket, change, and incident management using GLPI, Jira Service Management, or a similar platform

Benefits

Comp & perks

Flexible benefits card covering meals, mobility, culture, healthcare, and home office expenses, provided through a SWILE card
Health insurance with full coverage for the employee and no copayments (Bradesco Nacional)
Continuing education support through courses, training, specializations, and language assistance
Hybrid work model combining remote and in-office activities (2 remote days)
Extended maternity and paternity leave, among other benefits