Company: Vesper Team
Salary Range: from 2,000 to 3,500 USDT
Conditions: office, Moscow, full-time
About the Role
The server foundation has already been purchased and is being launched: physical servers, virtualization, segmented network, NAS. Some equipment still needs to be selected. We need a person who will take full ownership of the infrastructure: support, connecting new components, security, and handling requests from project teams. This is the sole system administrator: you will make decisions in your area independently, and major changes will be coordinated with the technical lead.
Responsibilities
- Operation of Linux servers, KVM VMs, NAS, UPS, and network equipment; updates, monitoring, incident management.
- Network: VLAN, firewall ("deny all that is not permitted"), DNS, certificates; access gateway (bastion, WireGuard, Xray), access accounting.
- Security: external access, secrets management, least privilege, auditing, analysis of suspicious events.
- Internal services: messenger, file sharing, password manager, remote desktops.
- Project requests: VMs, networks, domains, certificates, access, backups.
- Hardware and procurement: equipment selection and testing, suppliers, server installation, upgrades (disks, RAM, GPU). Complex builds will be handled through a supplier: technical specifications and acceptance.
- Documentation: network diagram, inventory of machines and accesses, regulations.
Requirements
- Linux senior / confident middle+: systemd, network stack, nftables/iptables, SSH hardening, diagnostics.
- Hardware: installation, IPMI, RAID, component replacement; selection of servers, storage, and disks. Experience with physical hardware, not just cloud.
- Networking: VLAN, routing, NAT, inter-segment firewall, WireGuard.
- Backups: pull/immutable, restore testing, NAS (Synology, TrueNAS, or similar); real restore case.
- Docker Compose: maintenance and updating of third-party stacks.
- Security: network perimeters, secrets storage, least privilege.
- Independence and accuracy: analyzing existing infrastructure without step-by-step instructions; implementing changes after approval and with rollback procedures.
Bonus Points
DevOps (GitLab CI, Container Registry, Ansible/Terraform), monitoring (Prometheus, Grafana, Loki), Netbird/Tailscale, Apple Silicon as servers, GPU/NVIDIA in VMs, self-hosted Matrix, Nextcloud, Guacamole, Passbolt, macOS and MDM support.
Conditions
- Office in Moscow, m. Novoslobodskaya, full-time employment.
- Off-hours emergencies will be handled only for a select list: VPN/gateway, messenger, remote desktops, signs of intrusion. Compensation for this is negotiable.
- Employment and salary range will be discussed during the interview.
Contacts: Telegram recruiter contact
