Context

Within a public research and academic environment in Luxembourg, the organization is strengthening its operational resilience, security monitoring, and incident response capabilities.

The role supports the deployment, administration, and continuous improvement of secure, open-source based infrastructures dedicated to cybersecurity monitoring, secure communications, and incident response operations.

The position requires strong Linux system administration expertise, solid security knowledge, and the ability to operate autonomously in a structured institutional environment.

Mission Objectives

The System & Security Engineer will:

• Ensure the stability and security of Linux-based infrastructures

• Strengthen incident detection and response tooling

• Maintain secure communication mechanisms and cryptographic assets

• Support the evolution of open-source security tools deployed on-premise

• Contribute to operational resilience and system hardening

Responsibilities

Infrastructure & Container Management

• Manage and maintain Docker containers (volumes, networks, configuration files)

• Perform Linux OS updates and system maintenance

• Address scalability needs (storage, RAM, CPU/process prioritization)

• Configure and manage reverse proxies (Caddy, Nginx)

Security & Cryptography

• Generate and manage local TLS certificates

• Manage mutual TLS client certificates, including lifecycle and client notifications

• Manage PGP user key lifecycle (creation, revocation, infrastructure management)

• Ensure secure configuration of protocols (TLS, SSH, secure cipher suites)

Monitoring & Incident Response

• Deploy and maintain SIEM solutions, primarily Elastic (on-premise)

• Deploy and manage Request Tracker for Incident Response (IR)

• Implement and maintain additional open-source tools supporting IR operations

Database & Messaging

• Deploy and manage SQL databases (PostgreSQL, PGAdmin)

• Configure and manage mail agents (MSMTP, Postfix)

Technical Skills Required

• Strong Linux system administration expertise

• Solid experience with Docker container environments

• Proven experience with TLS / mutual TLS certificate management

• Experience with PGP key management

• Experience deploying Elastic SIEM on-premise

• Experience managing reverse proxies (Nginx, Caddy)

• PostgreSQL administration

• Good understanding of security protocols and encryption standards

• Experience deploying and maintaining open-source security tools

Language Skills

• French – minimum B2 (oral & written)

• English – minimum B1 (oral & written)

Interpersonal Skills

• Proactive in proposing improvements for system efficiency

• Strong documentation and operational knowledge management

• Confident in collaborating with diverse stakeholders

• Strong reporting capability (clear and structured documentation)

• Able to work independently on technical assignments

• Adaptable to evolving requirements and feedback

• Team-oriented and aligned with institutional decisions

Nice to Have

• Hands-on experience with Elastic on-prem deployment

• Hands-on experience with Request Tracker IR on-prem deployment

Location : Luxembourg