Senior DevOps Engineer

Join a fast-growing cybersecurity company specializing in world-class privacy and security solutions. Operating as a fully remote global team, we are on a mission to protect digital lives and ensure anonymity for millions worldwide. We are vocal advocates for civil rights, digital freedom, and an uncensored online culture.

We are looking for an experienced Senior DevOps Engineer who thrives on solving complex challenges and is ready to make a massive impact on a high-traffic product at the intersection of security, massive scale, and digital freedom.

What we are looking for

• Monitoring: Zabbix / VictoriaMetrics – developer-level proficiency (creating templates, auto-discovery rules, external scripts).
• Scripting: Bash + sed + awk.
• Development: Go or Python.
• CI/CD: Good understanding of GitLab pipelines.
• UNIX Administration: Strong skills configuring RedHat (CentOS 7/8) and Debian (Debian, Ubuntu).
• OS Optimization: Deep knowledge of tuning operating systems for high-load environments (network IO, queues, CPU interrupts).
• Containerization: Docker, Portainer.
• VPN Technologies: Configuration and optimization of StrongSwan, accel-ppp, OpenVPN, WireGuard, Xray, Shadowsocks.
• Proxy: Strong experience working with Squid.
• Network Administration: Deep understanding of firewalls (iptables / nftables), routing, and virtual network devices.
• Databases: MySQL or PostgreSQL.
• Automation: Creating and maintaining playbooks and roles in Ansible (SaltStack is a plus).
• Cloud Services: AWS (EC2, RDS, S3, Route 53, ALB) and deployments via Terraform.
• Logging: ELK Stack.
• Orchestration: Kubernetes (Baremetal).
• Collaboration: Experience working with development and QA teams.
• English: B2 +.

Nice to Have

• Understanding of DPI/TSPU principles and bypass techniques (domain fronting, SNI masking, ECH, REALITY, uTLS).
• Experience with traffic obfuscation protocols (Xray/VLESS, Shadowsocks-2022, Cloak, Trojan-GFW).
• Experience with RIPE DB / IP registries: understanding allocation hierarchy, maintainers, route objects; ability to assess IP range “cleanliness” before deployment.
• Experience selecting and rotating IP infrastructure: choosing hosting providers/ASNs considering IP reputation, working with IP marketplaces (IPXO, etc.), understanding risks.
• Knowledge of TLS fingerprinting: uTLS, JA3/JA4, ALPN — ability to imitate fingerprints of popular browsers.
• Experience with CDN fronting (Cloudflare, Fastly, AWS CloudFront).

What We Offer

• Build personal AI agents using our premium infrastructure.
• Absolute freedom to work from any location (GMT+1– GMT+4).
• Internal R&D opportunities.
• Paid time off and sick leave.
• Direct impact on a massive, world-class B2C product.
• A collaborative environment with some of the best minds.
• Hardware upon completion of your probation.

If this sounds like you, we’ve been waiting for you! Let’s build the future of digital freedom together. Apply now.