Vesper team
Format: office, Moscow, full-time.
Salary is discussed after the interview.
About the Role
The infrastructure is already designed. Installation and basic setup (servers, network, hypervisors) are performed by a contractor. After that, the system is yours: refinement, operation, and development. This is a hands-on role: physical servers and network equipment in the office + virtual machines and services on top of them.
Responsibilities
- Post-contractor system refinement: VMs, internal services, access.
- Operation: uptime, monitoring, incidents.
- Backup: pull / immutable snapshots, regular restore checks.
- Support for segmented network: VLAN, default deny firewall, specific rules.
- Bastion gateway administration: WireGuard, SSH jump, keys/access, logs.
- Remote workstations: VM park (up to 15), maintenance and updates.
- NAS (Synology): pools, disk expansion, snapshot policies.
- UPS and correct shutdown (NUT/arcupsd), power scenario testing.
- Corporate equipment setup (including macOS), basic MDM.
Requirements
- Experience with physical server operation: disks/RAID, IPMI, component replacement, capacity planning. Not just cloud.
- Experience with hypervisors: Proxmox / KVM on bare-metal, VM deployment and management.
- Networks: VLAN segmentation, routing, WireGuard/VPN, tunnels, proxy.
- Backups: strategies, immutable/pull, restore testing. Experience with NAS (Synology/QNAP/TrueNAS).
- Working knowledge of Docker.
- Understanding of information security: network perimeters, secrets management, what can and cannot be exposed externally.
- Independence: ability to understand unfamiliar infrastructure and diagnose problems without step-by-step instructions.
- Work from the office in Moscow (the role requires physical access to hardware).
Bonus Points
- Apple Silicon (Mac Studio / Mac mini) as servers; inference clusters.
- Self-hosted communications: Matrix/Synapse, coturn, video calls.
- DevOps: CI/CD, IaC (Ansible/Terraform), provisioning automation.
- Monitoring: Grafana/Prometheus/Loki.
- MDM for macOS (Jamf/Mosyle).
- Tor/obfuscated tunnels, proxy infrastructure.
