About the company
Fast-growing IT company developing a popular VPN product used by millions of people worldwide. Our mission is to protect user privacy, ensure internet freedom, and provide secure access to information, regardless of geography or censorship.
Responsibilities
- Developing the infrastructure and improving DevOps processes
- Automating CI/CD pipelines and managing deployment tools (Ansible, Terraform, GitLab CI/CD)
- Supporting a stable and scalable infrastructure with high availability
- Ensuring operational quality: analyzing complex incidents, proposing solutions and recommendations for the team
- Setting up and improving monitoring (Zabbix, Grafana), defining metrics and thresholds for key services
- Ensuring infrastructure security: access management, firewalls, updates, 2FA
- Participating in architectural decisions and scaling systems
- Supporting the team: code reviews, sharing expertise within the DevOps team
Requirements
- Expertise in administering RHEL-based and Debian-based systems
- Developer-level proficiency in Zabbix and Grafana, including templates and LLD
- Deep knowledge of kernel and OS tuning for high-load environments and network I/O
- Advanced automation skills using Ansible, Terraform, Bash, sed, and awk
- Proficiency in Go or Python for writing internal tools and exporters
- Strong experience with Docker, Docker Compose, Portainer, and Proxmox virtualization
- Solid understanding of GitLab CI/CD pipelines, including nested structures
- Deep knowledge of firewalls (nftables), dynamic routing, and GRE/IPIP tunnels
- Hands-on experience configuring and optimizing VPN stacks like StrongSwan, OpenVPN, or Xray
- Practical experience with bare-metal Kubernetes operations
- Written English proficiency for technical communication with data centers and vendors
Nice to have
- Understanding of DPI/TSPU architecture and circumvention techniques including domain fronting and SNI masking
- Hands-on experience with traffic obfuscation protocols such as VLESS+REALITY, Shadowsocks-2022, and Cloak
- Practical experience with RIPE DB, IP registries, and evaluating IP range reputation
- Expertise in selecting ASNs and hosting providers based on IP reputation and abuse risks
- Knowledge of TLS fingerprinting and mimicking major browser fingerprints using uTLS and JA3/JA4 hashes
- Experience with CDN fronting via Cloudflare, Fastly, or AWS CloudFront
Conditions
- Fully remote, full-time position. Saturdays and Sundays are days off
- Comfortable working with HubStaff time-tracker
- Involvement in significant international projects
- Opportunities for professional development and career growth
- Competitive salary (the rate will depend on your qualifications and interview results)
- Friendly and young team