Senior DevOps Infrastructure Engineer

A Senior DevOps / Infrastructure Engineer in this role is responsible for building, optimizing, and maintaining a high‑performance, secure, and globally distributed infrastructure. The position requires deep expertise in Linux systems, networking, monitoring, VPN technologies, and traffic‑evasion techniques used in modern privacy‑focused environments. **About the Role** ------------------ You will design and operate mission‑critical infrastructure that supports large‑scale, high‑load systems. The work goes far beyond container management: it involves kernel‑level tuning, advanced networking, VPN stack engineering, and building monitoring systems from the ground up. This is a role for someone who understands how systems behave under pressure and knows how to automate everything that repeats. **Key Responsibilities** ------------------------ * Develop and evolve infrastructure architecture to ensure stability, scalability, and high availability. * Build and automate CI/CD pipelines using GitLab, Ansible, and Terraform. * Maintain and optimize Linux systems for high‑load environments, including kernel tuning and network performance adjustments. * Configure and improve monitoring systems (Zabbix, Grafana), including custom templates, auto‑discovery, and alerting logic. * Manage and optimize VPN technologies such as StrongSwan, OpenVPN, and Xray. * Analyze complex incidents, identify root causes, and implement long‑term fixes. * Ensure infrastructure security through access control, firewall management, updates, and 2FA. * Collaborate with development and QA teams in a distributed environment. * Participate in architectural decisions and guide the team through best practices. #### **Core Skills and Expertise** ##### **Monitoring Engineering** * Advanced proficiency with **Zabbix and Grafana**, including: * custom templates, * auto‑discovery rules, * external scripts, * alerting pipelines, * performance dashboards. ##### **Linux & Kernel Optimization** * Deep understanding of **kernel and OS tuning** for high‑load systems: * network I/O optimization, * socket buffer tuning, * IRQ affinity and CPU interrupt balancing, * NIC queue configuration, * sysctl tuning for throughput and latency. ##### **VPN Technologies** * Hands‑on experience configuring and optimizing: * **StrongSwan (IPsec)**, * **OpenVPN**, * **Xray-core** (VLESS/REALITY, VMess, Shadowsocks). * Understanding how VPN protocols behave under different network conditions and censorship environments. ##### **DPI Evasion & Traffic Obfuscation** * Knowledge of **DPI/TSPU architecture** and modern circumvention techniques: * domain fronting, * SNI masking, * ECH (Encrypted Client Hello), * REALITY, * uTLS fingerprinting. * Familiarity with obfuscation protocols such as Shadowsocks‑2022, Trojan‑GFW, and Cloak. ##### **Additional Technical Areas** * Scripting: Bash, sed, awk; Go or Python for tooling and automation. * Virtualization: Proxmox, Docker, Portainer. * Networking: firewalls (nftables/iptables), routing, PBR, VLANs, GRE/IPIP tunnels, tun/tap, veth, bridges. * Databases: PostgreSQL or MySQL (schema design, optimization, replication basics). * Automation: Ansible, Terraform. * Cloud: AWS, Cloudflare, Hetzner. * Logging: Elastic Stack, OpenSearch, Vector, Promtail, Loki. * Kubernetes on bare metal: deployment, CNI, storage, operations. * Secrets management: Infisical. ##### **Who Thrives in This Role** * Engineers who understand systems deeply and enjoy solving complex infrastructure problems. * People who automate everything and dislike repetitive manual work. * Those who can take ownership of critical systems and support the team with expertise. * Individuals comfortable working in distributed teams and communicating clearly in English. ##### **What the Company Offers** * Fully remote, full‑time position with weekends off. * Work with international, high‑impact projects. * Opportunities for professional growth and specialization. * Competitive salary based on experience. * A young, friendly, and technically strong team.