Operate and develop infrastructure in the Russian cloud Servercore: Kubernetes, PostgreSQL, Kafka, ClickHouse, Redis, network and VPN.
Complete the migration from Yandex Cloud. Manage infrastructure as code: Terraform, Helm, CI/CD on GitLab CI + werf.
Be responsible for secure rollout and rollback.
Be responsible for backups and recovery: schedules, regular recovery checks, runbooks, disaster recovery site.
Maintain monitoring and alerting (VictoriaMetrics, Alertmanager, Grafana, VictoriaLogs, Sentry). Analyze incidents, conduct postmortems, eliminate causes of recurring failures.
Process requests and grant access according to the role model (Keycloak, Vault). Manage technical onboarding and offboarding of employees.
Protect the perimeter: WAF, DDoS and anti-bot, network policies, secret management, hardening, rights audit.
Diagnose application issues from browser DevTools to service logs and database queries, providing the development team with the localized cause.
Automate repetitive tasks, use AI agents to speed up work, and write documentation.
Monitor the market and propose solutions to the CTO with cost and risk calculations.
Requirements
5+ years in DevOps/SRE, including 3+ years of personal responsibility for production on Kubernetes.
Linux at the production operating level. Practical networking: routing, NAT, firewall (nftables/iptables, security groups), DNS, TLS, VPN, L4/L7 load balancers.
Kubernetes in production: resources, ingress, RBAC, NetworkPolicy, troubleshooting, cluster updates.
Terraform, GitLab CI, Helm: changes only via code and review, check plan before apply.
PostgreSQL in production: replication, failover, point-in-time backups and recovery, identifying slow queries.
Understanding of protection levels: DDoS L3–L4 and L7, WAF, anti-bot, rate limiting, securing internal services behind VPN.
Access and secrets: least privilege, SSO and MFA, Vault or equivalent, rotation, revocation of rights.
Metrics and alerts: understand what to monitor (RED/USE, disks, replication, queues, certificates, backups), write alerts without noise.
Change discipline: backup before work, rollback plan, team notification, result verification.
Bash and Python scripting.
Use AI tools (Claude Code, Cursor, and similar) and know the rules for working with them safely: no secrets in chat, and no apply to production without verification.
Independence: figure out undocumented tasks, identify risks yourself, and bring solutions to completion.
Experience with integrating external DDoS and bot protection (Servicepipe, Qrator, DDoS-Guard, and similar).
Migrations between clouds or infrastructure handover from a contractor.
Fintech, PCI DSS, 152-FZ.
Conditions
Remote: fully remote format, with the possibility of working from anywhere in the world.
Cooperation format: self-employment or sole proprietorship, schedule 5/2 from 9:00 to 18:00 Moscow time.
Team: Young and ambitious professionals with whom it's easy to find non-standard solutions. No stifling bureaucracy, only trust and responsibility.
Technologies: You will work with AI tools that automate routine tasks and open up space for strategy.
Legendary events: Our corporate parties and team building events are not about "obligation" but about real emotions that you'll tell your friends about later.
Feasts and атрибутика (merchandise/attributes): Friday get-togethers, unique branded hoodies, and even your own personalized avatar – we create our own style.
Global networking: Meet and interact with clients and partners from all over the world without leaving home.
