Senior DevOps / Infrastructure Engineer

A Senior DevOps / Infrastructure Engineer in this role is responsible for building, optimizing, and maintaining a high‑performance, secure, and globally distributed infrastructure. The position requires deep expertise in Linux systems, networking, monitoring, VPN technologies, and traffic‑evasion techniques used in modern privacy‑focused environments.

About the Role

You will design and operate mission‑critical infrastructure that supports large‑scale, high‑load systems. The work goes far beyond container management: it involves kernel‑level tuning, advanced networking, VPN stack engineering, and building monitoring systems from the ground up. This is a role for someone who understands how systems behave under pressure and knows how to automate everything that repeats.

Key Responsibilities

• Develop and evolve infrastructure architecture to ensure stability, scalability, and high availability.

• Build and automate CI/CD pipelines using GitLab, Ansible, and Terraform.

• Maintain and optimize Linux systems for high‑load environments, including kernel tuning and network performance adjustments.

• Configure and improve monitoring systems (Zabbix, Grafana), including custom templates, auto‑discovery, and alerting logic.

• Manage and optimize VPN technologies such as StrongSwan, OpenVPN, and Xray.

• Analyze complex incidents, identify root causes, and implement long‑term fixes.

• Ensure infrastructure security through access control, firewall management, updates, and 2FA.

• Collaborate with development and QA teams in a distributed environment.

• Participate in architectural decisions and guide the team through best practices.

Core Skills and Expertise

• Advanced proficiency with Zabbix and Grafana, including:

  • custom templates,

  • auto‑discovery rules,

  • external scripts,

  • alerting pipelines,

  • performance dashboards.

• Deep understanding of kernel and OS tuning for high‑load systems:

  • network I/O optimization,

  • socket buffer tuning,

  • IRQ affinity and CPU interrupt balancing,

  • NIC queue configuration,

  • sysctl tuning for throughput and latency.

• Hands‑on experience configuring and optimizing:

  • StrongSwan (IPsec),

  • OpenVPN,

  • Xray-core (VLESS/REALITY, VMess, Shadowsocks).

• Understanding how VPN protocols behave under different network conditions and censorship environments.

• Knowledge of DPI/TSPU architecture and modern circumvention techniques:

  • domain fronting,

  • SNI masking,

  • ECH (Encrypted Client Hello),

  • REALITY,

  • uTLS fingerprinting.

  • Familiarity with obfuscation protocols such as Shadowsocks‑2022, Trojan‑GFW, and Cloak.

• Scripting: Bash, sed, awk; Go or Python for tooling and automation.

• Virtualization: Proxmox, Docker, Portainer.

• Networking: firewalls (nftables/iptables), routing, PBR, VLANs, GRE/IPIP tunnels, tun/tap, veth, bridges.

• Databases: PostgreSQL or MySQL (schema design, optimization, replication basics).

• Automation: Ansible, Terraform.

• Cloud: AWS, Cloudflare, Hetzner.

• Logging: Elastic Stack, OpenSearch, Vector, Promtail, Loki.

• Kubernetes on bare metal: deployment, CNI, storage, operations.

• Secrets management: Infisical.

• Engineers who understand systems deeply and enjoy solving complex infrastructure problems.

• People who automate everything and dislike repetitive manual work.

• Those who can take ownership of critical systems and support the team with expertise.

• Individuals comfortable working in distributed teams and communicating clearly in English.

• Fully remote, full‑time position with weekends off.

• Work with international, high‑impact projects.

• Opportunities for professional growth and specialization.

• Competitive salary based on experience.

• A young, friendly, and technically strong team.