Linux System Administrator
PaynetEasy
Salary: from 300-450,000 Russian rubles (and above).
Conditions: full-time, hybrid / office / remote.
Responsibilities:
- Administration and support of Linux-based infrastructure.
- Ensuring stability, performance, and security of servers and network equipment.
- Management and monitoring of network services, VPN, and tunnels.
- Support of KVM-based virtualization environment.
- Automation of routine tasks and processes.
- Participation in building and developing the company's on-premise infrastructure.
Requirements:
- Operating Systems (Linux RPM-based)
- Deep understanding of the architecture of RHEL-like systems.
- Confident administration of: AlmaLinux, Rocky Linux, CentOS Stream, RHEL, Fedora Server.
- Deep understanding of systemd (writing units, timers, debugging dependencies);
- Working with kernel subsystems, tuning via sysctl.
- Disk management: LVM, XFS/EXT4 file systems, working with RAID (mdadm/hardware).
- Performance analysis and troubleshooting (strace, tcpdump, lsof, iostat, vmstat).
- Package management: confident work with dnf/yum; ability to create your own packages (writing .spec files, working with rpmbuild); creation and support of local repositories (createrepo, GPG package signing).
- Confident knowledge of the OSI model and TCP/IP stack. Understanding the workings of DNS, DHCP, ARP, NAT (SNAT/DNAT/Masquerade).
- Experience configuring switches and routers (MikroTik, Cisco, Juniper or similar).
- Configuring VLAN (802.1Q), Trunk/Access ports, STP/RSTP, LACP (link aggregation).
- Routing: static, understanding the principles of dynamic (OSPF/BGP – will be a plus).
- Network diagnostics: ability to identify packet loss and delays (mtr, iperf, wireshark).
- Experience configuring and tuning Nginx and/or HAProxy (load balancing, SSL termination, caching).
- Working with Squid (forward proxy, ACL, authorization).
- Building Site-to-Site and Client-to-Site VPN.
- Technologies: WireGuard (mandatory), OpenVPN, IPsec (StrongSwan/MikroTik).
- Understanding the principles of GRE, IPIP tunnels.
- Virtualization: experience with KVM, libvirt, QEMU. Ability to manage VMs from the console (virsh).
- Containers (desirable): experience with Podman or Docker, writing Dockerfile/Containerfile.
- Scripting and automation: Bash, Ansible
We offer:
- Full-time employment.
- Flexible schedule opportunity
- Formal employment according to the Labor Code of the Russian Federation in an accredited IT company.
