Company: Intellectual Management Systems
Location: Saint Petersburg
Employment: full-time
Work Format: flexible remote format
Salary: 300000–450000 RUR per month
About the Company and Candidate Expectations
We are looking for a DevOps engineer to develop and operate project infrastructure in the field of information security. We value a specialist who understands how applications, containers, networks, storage, and physical equipment are connected, and can troubleshoot problems at various levels.
We manage stable, long-term projects with high security and availability requirements. The main infrastructure runs on our own hardware in data centers; for some tasks, we use resources from hosting and cloud providers.
Your Responsibilities Will Include:
- Developing and supporting infrastructure on bare metal, virtual machines, and Kubernetes.
- Automating application build, delivery, and deployment using GitLab CI/CD and Argo CD.
- Ensuring service fault tolerance across infrastructure with three points of presence, participating in the design and verification of failover and recovery scenarios.
- Supporting storage systems, databases, and infrastructure services: managing configurations, updates, backups, and recovery.
- Developing monitoring and alerting, identifying bottlenecks, analyzing incidents, and eliminating the root causes of recurring failures.
- Ensuring secure service interaction, managing secrets, certificates, and access.
- Documenting architecture, operational procedures, and adopted technical solutions.
Core Stack, Experience with which is Especially Important to Us:
- Container Infrastructure and Networking: Kubernetes, K3s, Cilium.
- CI/CD and Artifact Storage: GitLab CI/CD, Argo CD, Harbor, Nexus.
- Storage: S3-compatible systems — MinIO, SeaweedFS; Ceph.
- Databases and Caching: PostgreSQL, ClickHouse, Redis / Valkey.
- Secrets and Access Management: Vault, Keycloak.
- Communication Services: WebRTC, TURN / coturn.
- Monitoring: VictoriaMetrics, Grafana, Zabbix.
For This Role, It Is Important:
- Solid experience with Linux and an understanding of server infrastructure operation principles.
- Understanding of bare metal, hypervisors, and virtualization; familiarity with Proxmox VE and VMware. Practical experience will be an advantage.
- Confident understanding of the OSI model at layers L1–L7 and the ability to apply this knowledge during diagnostics.
- Understanding of routing, NAT, and DNS, and the ability to troubleshoot network connectivity and service availability issues.
- Understanding of principles for building fault-tolerant infrastructure across three sites: replication, quorum, system behavior during site loss or communication loss between sites. Practical experience with such solutions is especially valued.
- Understanding of security practices for cryptographic algorithms (СКЗИ), working with certificates, and mutual TLS authentication — mTLS.
- Independence in diagnostics, meticulousness in making changes, and the ability to assess their impact on availability and security.
Will Be an Advantage:
- Experience with MikroTik and Huawei network equipment.
- Understanding of NGFW principles, including Positive Technologies solutions.
- Experience with NetBird.
- Understanding of the architecture and operating principles of UEM and MDM systems.
- Experience deploying and operating infrastructure for on-premise LLMs: vLLM, LiteLLM, llama.cpp, Hugging Face models and tools.
- Familiarity with GPU infrastructure and compute acceleration: NVIDIA / CUDA, DGX Spark, macOS / Metal.
Working Conditions
- Flexible remote work format.
- Employment: full-time.
- Employment Type: Sole Proprietorship (ИП), also requires signing an NDA (high confidentiality requirements).
- Work in a strong team, minimal bureaucracy, and live communication.
Additional Instructions
We offer stable, long-term projects in the cybersecurity field and engineering tasks at the intersection of infrastructure, networks, and security. Here, you can work with the complete stack — from physical equipment in the data center to application delivery and ensuring their reliable operation.
In your application, it would be helpful to briefly describe your infrastructure: what scale you have worked with, what components you were responsible for, and what fault tolerance or security challenges you solved.