Vacancy for a "DevOps Engineer" in Saint Petersburg, working at "Intellectual management systems". Full-time employment. Remote work is possible.
About the company and candidate expectations
We are looking for a DevOps engineer to develop and operate project infrastructure in the field of information security. We value a specialist who understands how applications, containers, networks, storage, and physical equipment are interconnected, and can troubleshoot problems at various levels.
We manage stable, long-term projects with high security and availability requirements. The main infrastructure runs on our own hardware in data centers; for some tasks, we use resources from hosting and cloud providers.
Your responsibilities will include:
- Developing and supporting infrastructure on bare metal, virtual machines, and Kubernetes.
- Automating application building, delivery, and deployment using GitLab CI/CD and Argo CD.
- Ensuring service fault tolerance in a three-site infrastructure, participating in the design and verification of failover and recovery scenarios.
- Supporting storage systems, databases, and infrastructure services: managing configurations, updates, backups, and recovery.
- Developing monitoring and alerting, identifying bottlenecks, analyzing incidents, and eliminating the causes of recurring failures.
- Ensuring secure service interaction, managing secrets, certificates, and access.
- Documenting architecture, operational procedures, and adopted technical solutions.
The primary tech stack we are particularly interested in:
- Container infrastructure and networking: Kubernetes, K3s, Cilium.
- CI/CD and artifact storage: GitLab CI/CD, Argo CD, Harbor, Nexus.
- Storage: S3-compatible systems — MinIO, SeaweedFS; Ceph.
- Databases and caching: PostgreSQL, ClickHouse, Redis / Valkey.
- Secrets and access management: Vault, Keycloak.
- Communication services: WebRTC, TURN / coturn.
- Monitoring: VictoriaMetrics, Grafana, Zabbix.
Important for this role:
- Confident work with Linux and understanding of server infrastructure operation principles.
- Understanding of bare metal, hypervisors, and virtualization; familiarity with Proxmox VE and VMware. Practical experience will be an advantage.
- Solid understanding of the OSI model at layers L1–L7 and the ability to apply this knowledge in diagnostics.
- Understanding of routing, NAT, and DNS, ability to troubleshoot network connectivity and service availability issues.
- Understanding of principles for building fault-tolerant infrastructure across three sites: replication, quorum, system behavior during site loss or loss of communication between sites. Practical experience with such solutions is especially valued.
- Understanding of practical application of cryptographic security tools (СКЗИ), working with certificates, and mutual TLS authentication — mTLS.
- Independence in diagnostics, carefulness during changes, and the ability to assess their impact on availability and security.
Will be an advantage:
- Experience with MikroTik and Huawei network equipment.
- Understanding of NGFW principles, including Positive Technologies solutions.
- Experience with NetBird.
- Understanding of UEM and MDM system architecture and operating principles.
- Experience in deploying and operating infrastructure for local LLMs: vLLM, LiteLLM, llama.cpp, Hugging Face models and tools.
- Familiarity with GPU infrastructure and compute acceleration: NVIDIA / CUDA, DGX Spark, macOS / Metal.
Work conditions
- Flexible remote work format
- Employment: full-time
- Employment type: Sole Proprietor, NDA signing is also mandatory (high confidentiality requirements)
- Working in a strong team, minimal bureaucracy, and live communication.
Additional instructions
We offer stable, long-term projects in information security and engineering tasks at the intersection of infrastructure, networks, and security. Here you can work with the complete cycle — from physical equipment in the data center to application delivery and ensuring their reliable operation.
In your application, it would be helpful to briefly describe your infrastructure: what scale you worked with, which components you were responsible for, and what fault tolerance or security challenges you solved.
