全职 Unix-Linux System Administrator (Infrastructure - Information Security) 工作, 薪水 up to MYR 9,600, Rock Wing Capital Sdn.Bhd Federal Territory 公司招聘中 - Ricebowl

About the role

We are looking for a Unix/Linux System Administrator to take full ownership of our on-premises office infrastructure and our core information security function. We are a fintech company in Kuala Lumpur handling customers' personal and financial data, so system stability and security are critical.

Current stack: a Dell PowerEdge T140 server running Proxmox VE, virtual machines and containers on Debian and Ubuntu, a Synology NAS, and a FortiGate firewall. The role reports to the CTO and splits roughly 60% systems administration and 40% information security.

Responsibilities: infrastructure

• Administer the Proxmox VE hypervisor on the Dell PowerEdge T140: create and maintain VMs and LXC containers, allocate resources, manage storage (ZFS/LVM), and apply updates.
• Maintain Debian and Ubuntu servers: install and configure services, manage users and permissions, systemd, cron, and key-based SSH access.
• Administer the Synology NAS (DSM): shared folders, access rights, quotas, snapshots, RAID, and disk health monitoring.
• Run 3-2-1 backups: Proxmox Backup Server and/or vzdump, Synology Hyper Backup, an offsite or cloud copy; perform regular test restores.
• Maintain hardware: monitor server health via iDRAC, replace disks, handle Dell warranty cases, manage UPS and graceful shutdown on power loss.
• Networking: configure FortiGate (policies, VLANs, remote-access VPN), DNS, DHCP, and office network segmentation.
• Monitor availability and performance (Zabbix or Prometheus + Grafana) and configure alerts.
• Maintain documentation: network diagram, server and service inventory, credentials in a password manager, runbooks for common incidents.
• Work with vendors and integrators on hardware procurement and upgrades.

Responsibilities: information security

• Centralise collection and analysis of logs from servers, Proxmox, Synology, and FortiGate (Wazuh, Graylog, ELK/OpenSearch, or similar).
• Configure correlation rules and alerts, triage alerts, filter false positives, and escalate real incidents.
• Respond to security incidents: containment, investigation, recovery, and a post-incident report.
• Patch management: apply security updates to the OS, Proxmox, DSM, and FortiGate firmware on an agreed schedule, with rollback when needed.
• Run regular vulnerability scans (OpenVAS/Greenbone, Nessus, or similar) and remediate findings by priority.
• Perform internal penetration testing of the network perimeter and internal services (Nmap, Metasploit, Burp Suite, etc.); prepare for and support external pentests by third parties.
• Harden systems to CIS Benchmarks: SSH, host firewalls (nftables/ufw), fail2ban, disabling unused services, least privilege.
• Install and maintain security software: EDR/antivirus, MFA, password manager, VPN.
• Review access rights and accounts quarterly and revoke access when employees leave.
• Deliver a monthly report to the CTO on infrastructure and security status: incidents, vulnerabilities, patch status, and backup test results.

Requirements

• 3+ years of production Linux administration (Debian/Ubuntu).
• Hands-on experience with Proxmox VE or another virtualisation platform (KVM, VMware), including VM backup and recovery.
• Experience with NAS (Synology or similar), RAID, and ZFS/ext4 file systems.
• Strong networking knowledge: TCP/IP, VLANs, routing, DNS, DHCP, VPN; experience configuring firewalls.
• Hands-on FortiGate (FortiOS) administration: security policies, NAT, VLANs, IPsec and SSL VPN, IPS, web filtering, HA, firmware upgrades.
• Experience setting up monitoring and centralised logging.
• Solid grasp of security fundamentals: hardening, vulnerability management, patch management, incident response.
• Practical skills with penetration testing tools and vulnerability scanners.
• Bash scripting; Python is a plus.
• Working proficiency in English (documentation, vendor communication).
• Willingness to be on call and come onsite for critical incidents.

Nice to have

• Certifications: LPIC/RHCSA, CompTIA Security+, CEH, OSCP, Fortinet NSE.
• Experience with FortiAnalyzer, FortiClient EMS, and other Fortinet Security Fabric products.
• Fintech or banking background; familiarity with Bank Negara Malaysia RMiT requirements and the Personal Data Protection Act (PDPA Malaysia).
• Infrastructure as Code: Ansible, Terraform.
• Docker and basic AWS knowledge (hybrid office + cloud infrastructure).
• PostgreSQL administration at the level of backups and monitoring.
• Russian language.

What we offer

• Full-time, office-based in Kuala Lumpur; hybrid arrangement negotiable.
• On-call rotation with separate compensation; onsite attendance for critical incidents.
• Salary: based on interview results (range to be confirmed).
• Budget for security certifications and training.
• Direct reporting to the CTO, with real influence on architecture and tooling choices.
• A professional working environment in a modern office located in the vibrant Bangsar South (KL Gateway Mall), just a 5-minute walk to the University LRT station via a connected bridge.

Pay: RM3,800.00 - RM9,600.00 per month

Benefits:

• Dental insurance
• Free parking
• Maternity leave
• Opportunities for promotion
• Parental leave
• Professional development

Work Location: In person