About the company and candidate expectations

We are looking for a DevOps engineer to develop and operate infrastructure for information security projects. We value a specialist who understands how applications, containers, networks, storage, and physical equipment are interconnected, and can identify the root causes of problems at various levels. We manage stable, long-term projects with high security and availability requirements. The core infrastructure runs on our own hardware in data centers; for some tasks, we use resources from hosting and cloud providers.

Your responsibilities will include:

• Developing and supporting infrastructure on bare metal, virtual machines, and Kubernetes. • Automating the build, delivery, and deployment of applications using GitLab CI/CD and Argo CD. • Ensuring the fault tolerance of services in a three-site presence infrastructure, participating in the design and testing of failover and recovery scenarios. • Supporting storage systems, databases, and infrastructure services: managing configurations, updates, backups, and recovery. • Developing monitoring and alerting systems, identifying bottlenecks, analyzing incidents, and eliminating the causes of recurring failures. • Ensuring secure service interaction, managing secrets, certificates, and access. • Documenting architecture, operational procedures, and technical decisions made.

The primary tech stack, experience with which is particularly important to us:

• Container infrastructure and networks: Kubernetes, K3s, Cilium.
• CI/CD and artifact storage: GitLab CI/CD, Argo CD, Harbor, Nexus.
• Storage: S3-compatible systems — MinIO, SeaweedFS; Ceph.
• Databases and caching: PostgreSQL, ClickHouse, Redis / Valkey.
• Secrets and access management: Vault, Keycloak.
• Communication services: WebRTC, TURN / coturn.
• Monitoring: VictoriaMetrics, Grafana, Zabbix.

Important for this role:

• Proficient work with Linux and understanding of server infrastructure operation principles.
• Understanding of bare metal, hypervisors, and virtualization; familiarity with Proxmox VE and VMware. Practical experience will be an advantage.
• Solid understanding of the OSI model at layers L1–L7 and the ability to apply this knowledge during diagnostics.
• Understanding of routing, NAT, and DNS, ability to troubleshoot network connectivity and service availability issues.
• Understanding of principles for building fault-tolerant infrastructure across three sites: replication, quorum, system behavior during site loss or communication loss between sites. Practical experience with such solutions is especially valued.
• Understanding of cryptographic security tools (СКЗИ) application practices, working with certificates, and mutual TLS authentication — mTLS.
• Independence in diagnostics, diligence in making changes, and the ability to assess their impact on availability and security.

Will be an advantage:

• Experience with MikroTik and Huawei network equipment.
• Understanding of NGFW principles, including Positive Technologies solutions.
• Experience with NetBird.
• Understanding of UEM and MDM system architecture and principles.
• Experience deploying and operating infrastructure for local LLMs: vLLM, LiteLLM, llama.cpp, Hugging Face models and tools.
• Familiarity with GPU infrastructure and compute acceleration: NVIDIA / CUDA, DGX Spark, macOS / Metal.

Work conditions

• Flexible remote work format
• Employment type: full-time
• Employment: Sole Proprietor, also mandatory NDA signing (high confidentiality requirements)
• Work in a strong team, minimal bureaucracy, and direct communication.

Additional instructions

We offer stable, long-term projects in the information security field and engineering tasks at the intersection of infrastructure, networks, and security. Here, you can work with the complete stack — from physical equipment in the data center to application delivery and ensuring their reliable operation. In your application, it would be helpful to briefly describe your infrastructure experience: the scale you worked with, the components you were responsible for, and the fault tolerance or security challenges you addressed.