Engineer for blocking bypass and network infrastructure (VPN)

VACANCY: Engineer for blocking bypass and network infrastructure (VPN)

We are a VPN service, helping users in the Russian Federation maintain internet access. ~20,000+ users, infrastructure under real load and constant pressure from TSPU/RKN. We are looking for someone who will ensure the service runs stably in all regions and with all operators, despite DPI, and that the server fleet is reliable.

WHAT YOU WILL DO: • keep the bypass working: multi-transport (VLESS/Reality, Hysteria2, XHTTP), SNI selection, IP rotation, diversification by AS/hosts • diagnose regional blocks ("works somewhere, doesn't work elsewhere") and fix them • build detection of REAL reachability from Russian networks (probes/telemetry), not DC pings • manage the node fleet: deploy, monitor (Prometheus/Grafana/Loki), firewall (iptables/nftables), DDoS/scanner protection • automate node startup and rotation (scripts/agents)

WHAT WE EXPECT: • real understanding of TSPU operation: active probing, protocol fingerprinting, filtering by SNI/IP/AS, difference between throttle vs full block • Xray-core (VLESS, Reality, XHTTP, uTLS), Hysteria2/TUIC, obfuscations; understanding why CDN/domain-fronting doesn't help in Russia • deep Linux networking: iptables/nftables, routing, conntrack, MTU/MSS • Docker, monitoring, automation (Ansible/scripts), Go or Python

WILL BE A PLUS: • experience with anti-censorship projects and community (Xray/sing-box, thematic forums) • high-load systems (10k+ simultaneous connections) • access to mobile networks of different Russian operators for testing

CONDITIONS: • remote • salary from 100 to 150 thousand rubles • work under real load, non-trivial tasks, direct impact on the product