Accept and close tickets in the tracker: accesses, environments, configurations, typical development, analytics, and support issues.
Issue, modify, and revoke accesses based on the role model (Keycloak, Vault, GitLab, VPN). Manage technical onboarding and offboarding of employees and contractors.
Monitor the operation of production and stage environments: Kubernetes, PostgreSQL, Kafka, Redis. Respond to alerts, perform initial diagnostics, escalate with collected facts.
Control backups: verify their successful completion, participate in regular recovery tests.
Support CI/CD on GitLab CI + werf: connect services using templates, troubleshoot failing pipelines.
Administer internal services (GitLab, Grafana, Airflow, Metabase, Retool, and others), maintain a registry of systems, owners, and instructions.
Control licenses, payments, and renewals of technical services, interact with providers.
Notify the team about planned work and report on status.
Transform repetitive requests into scripts, templates, and instructions, including with the help of AI tools.
Requirements
2-3 years of experience in DevOps or system administration, experience supporting production services.
Linux: processes, disks, network, systemd, logs.
Networking at a basic practical level: IP and subnets, routing, NAT, DNS, TLS, VPN, firewall. Ability to use dig, curl, mtr, tcpdump.
Kubernetes at an operational level: pods, deployments, services, ingress, logs, and events. Ability to find out why a pod is not starting.
Docker, GitLab CI, Helm; basic understanding of Terraform.
PostgreSQL: connection, permissions and roles, simple queries, searching for slow queries and locks.
Monitoring: Prometheus-compatible metrics, Grafana, alerts. Understanding what an alert means and where to look next.
Secure access management: minimally required permissions, MFA, secrets not in chats or git, mandatory revocation upon termination.
Understanding the purpose of WAF, DDoS protection, and anti-bot measures.
Ability to open browser DevTools and understand from the Network tab where the error is: on the frontend, in the API, or in the infrastructure.
Discipline: perform a backup before making changes, verify the result, notify the team.
Scripting in Bash, basic Python.
Use of AI tools in work and not sharing secrets and personal data with them.
Accuracy and responsibility for operational tasks, including accesses, licenses, and renewals.
Readiness for scheduled on-call duties.
Bonus Points
Keycloak, Vault, werf.
Kafka, ClickHouse, Patroni.
Experience in maintaining systems and access registries, working with procurement and renewals.
Fintech or experience working with personal data (152-FZ).
Conditions
Remote work: fully remote format, with the possibility of working from anywhere in the world.
Cooperation format: self-employment or individual entrepreneur (IP), 5/2 schedule from 9:00 to 18:00 Moscow time.
Team: Young and ambitious professionals with whom it's easy to find non-standard solutions. No stifling bureaucracy, only trust and responsibility.
Technologies: You will work with AI tools that automate routine tasks and open up space for strategy.
Legendary events: Our corporate parties and team-building events are not about "obligation" but about genuine emotions that you'll tell your friends about later.
Feasts and merchandise: Friday gatherings, unique branded hoodies, and even your own personalized avatar – we create our own style.
Global networking: Meet and communicate with clients and partners from all over the world without leaving your home.
