I work in a small software house. We are all developers and we do servers/network management required for our software (many servers per customer).
We are expanding with more customers; and the overhead of server management is increasing and now we plan to hire server(s) administrator.
Normally the servers/networks will monitor/manage dozen of VPSs, couple of vpn/domain servers, some database and email servers.
My main concern is trust. How can I trust someone with all these credentials just because he passed technical/hr interviews?
- By trust I mean trust as in malice, not incompetence.
- Impact of dishonest developer is lower. We have code reviews and testing. The worst thing to do is to take the code. But server admin can delete servers, delete backups, ...etc.
- I read many times about server admin who took server control and asked for ransom (after conflict with management).