Vacancy: Senior DevOps engineer in an international VPN project
Format: remote
Expertise and experience in VPN services are mandatory!!!
What you will be doing:
- Developing VPN node infrastructure and DevOps processes: Ansible roles, playbooks, templates
- Supporting a stable, scalable, high-availability infrastructure
- Firewall (nftables) and DDoS mitigation at L3/L4
- Diagnosing complex incidents using metrics (Prometheus/Grafana) and logs (Loki) — down to the root cause
- Security: CrowdSec, Fail2ban, SSH hardening, access and certificate management
- Developing monitoring: dashboards, metrics, and thresholds for key services
- Code review and knowledge sharing within the team
Requirements
- Confident administration of Debian/Ubuntu: systemd, kernel tuning via sysctl (conntrack, TCP buffers, fd limits) for high-load network I/O
- Deep network knowledge: TCP/IP, conntrack, nftables (rules, sets, counters, debugging), diagnostics via tcpdump/ss/mtr/ip
- Advanced automation: Ansible, Jinja2, Bash
- Python for writing internal tools and exporters
- Docker / Docker Compose: deployment, updates, debugging, networking, volumes
- Practical experience with VPN/proxy stacks: Xray (VLESS, Reality, Trojan), Shadowsocks
- Ability to read others' code without documentation — the primary documentation is the repository itself
- Written English for technical communication with data centers and vendors
Would be a plus
- Understanding of DPI/TSPPU architecture and blocking bypass techniques: domain fronting, SNI masking
- Traffic obfuscation protocols: VLESS+REALITY, Shadowsocks-2022, Cloak
- TLS fingerprinting: uTLS, browser fingerprint simulation, JA3/JA4 hashes
- CDN fronting via Cloudflare / Fastly / CloudFront
- Working with RIPE database, IP registries, and assessing IP range reputation
- Selection of ASNs and hosting providers considering IP reputation and abuse risks
- Caddy / Nginx: reverse proxy, TLS termination
- PostgreSQL / MariaDB / Valkey: basic administration, backups
- Cloudflare: DNS management, proxying; ACME / Certwarden
Why it's interesting to work with us
— Carte blanche for infrastructure. Freedom in choosing solutions and technologies.
— Direct impact on the product. Flat structure, minimal bureaucracy, solutions are implemented quickly.
— Budget for experiments. We have hardware and servers to try new approaches
— Real scale and complex tasks. International infrastructure, high load
— Modern stack without legacy. Up-to-date tools, little technical debt.
— Growth in breadth. Small team, broad area of responsibility — you quickly level up at the intersection of networks, security, and automation
— Pleasant team. Adequate people, mutual assistance, and knowledge sharing within the team
Conditions
- Full remote, work from anywhere
- Salary 4000-5000 USDT/month
- Flexible schedule, results-oriented, minimum meetings
- Friendly team, mutual assistance, and knowledge sharing within the team
- No restrictions on tools and subscriptions — we pay for what you need to work
If interested, write to recruiter contact
