Senior DevOps / Infrastructure Engineer

Anywhere in the World·Posted today
pythongokubernetesdockerawsterraform
<p> <strong>Headquarters:</strong> Remote Island Lake Argyle, Remote, 6743 Australia </p> <br><div class="mx-auto max-w-750 prose font-company-body overflow-hidden break-words [&amp;_ol_li_li]:list-[lower-alpha]"><br><p><span>A Senior DevOps / Infrastructure Engineer in this role is responsible for building, optimizing, and maintaining a high‑performance, secure, and globally distributed infrastructure. The position requires deep expertise in Linux systems, networking, monitoring, VPN technologies, and traffic‑evasion techniques used in modern privacy‑focused environments.</span></p><h2><span><strong>About the Role</strong></span></h2><p><span>You will design and operate mission‑critical infrastructure that supports large‑scale, high‑load systems. The work goes far beyond container management: it involves kernel‑level tuning, advanced networking, VPN stack engineering, and building monitoring systems from the ground up. This is a role for someone who understands how systems behave under pressure and knows how to automate everything that repeats.</span></p><h2><span><strong>Key Responsibilities</strong></span></h2><ul><li><p><span>Develop and evolve infrastructure architecture to ensure stability, scalability, and high availability.</span></p></li><li><p><span>Build and automate CI/CD pipelines using GitLab, Ansible, and Terraform.</span></p></li><li><p><span>Maintain and optimize Linux systems for high‑load environments, including kernel tuning and network performance adjustments.</span></p></li><li><p><span>Configure and improve monitoring systems (Zabbix, Grafana), including custom templates, auto‑discovery, and alerting logic.</span></p></li><li><p><span>Manage and optimize VPN technologies such as StrongSwan, OpenVPN, and Xray.</span></p></li><li><p><span>Analyze complex incidents, identify root causes, and implement long‑term fixes.</span></p></li><li><p><span>Ensure infrastructure security through access control, firewall management, updates, and 2FA.</span></p></li><li><p><span>Collaborate with development and QA teams in a distributed environment.</span></p></li><li><p><span>Participate in architectural decisions and guide the team through best practices.</span></p></li></ul><h4><span><strong>Core Skills and Expertise</strong></span></h4><h5><span><strong>Monitoring Engineering</strong></span></h5><ul><li><p><span>Advanced proficiency with <strong>Zabbix and Grafana</strong>, including:</span></p><ul><li><p><span>custom templates,</span></p></li><li><p><span>auto‑discovery rules,</span></p></li><li><p><span>external scripts,</span></p></li><li><p><span>alerting pipelines,</span></p></li><li><p><span>performance dashboards.</span></p></li></ul></li></ul><h5><span><strong>Linux &amp; Kernel Optimization</strong></span></h5><ul><li><p><span>Deep understanding of <strong>kernel and OS tuning</strong> for high‑load systems:</span></p><ul><li><p><span>network I/O optimization,</span></p></li><li><p><span>socket buffer tuning,</span></p></li><li><p><span>IRQ affinity and CPU interrupt balancing,</span></p></li><li><p><span>NIC queue configuration,</span></p></li><li><p><span>sysctl tuning for throughput and latency.</span></p></li></ul></li></ul><h5><span><strong>VPN Technologies</strong></span></h5><ul><li><p><span>Hands‑on experience configuring and optimizing:</span></p><ul><li><p><span><strong>StrongSwan (IPsec)</strong>,</span></p></li><li><p><span><strong>OpenVPN</strong>,</span></p></li><li><p><span><strong>Xray-core</strong> (VLESS/REALITY, VMess, Shadowsocks).</span></p></li></ul></li><li><p><span>Understanding how VPN protocols behave under different network conditions and censorship environments.</span></p></li></ul><h5><span><strong>DPI Evasion &amp; Traffic Obfuscation</strong></span></h5><ul><li><p><span>Knowledge of <strong>DPI/TSPU architecture</strong> and modern circumvention techniques:</span></p><ul><li><p><span>domain fronting,</span></p></li><li><p><span>SNI masking,</span></p></li><li><p><span>ECH (Encrypted Client Hello),</span></p></li><li><p><span>REALITY,</span></p></li><li><p><span>uTLS fingerprinting.</span></p></li><li><p><span>Familiarity with obfuscation protocols such as Shadowsocks‑2022, Trojan‑GFW, and Cloak.</span></p></li></ul></li></ul><h5><span><strong>Additional Technical Areas</strong></span></h5><ul><li><p><span>Scripting: Bash, sed, awk; Go or Python for tooling and automation.</span></p></li><li><p><span>Virtualization: Proxmox, Docker, Portainer.</span></p></li><li><p><span>Networking: firewalls (nftables/iptables), routing, PBR, VLANs, GRE/IPIP tunnels, tun/tap, veth, bridges.</span></p></li><li><p><span>Databases: PostgreSQL or MySQL (schema design, optimization, replication basics).</span></p></li><li><p><span>Automation: Ansible, Terraform.</span></p></li><li><p><span>Cloud: AWS, Cloudflare, Hetzner.</span></p></li><li><p><span>Logging: Elastic Stack, OpenSearch, Vector, Promtail, Loki.</span></p></li><li><p><span>Kubernetes on bare metal: deployment, CNI, storage, operations.</span></p></li><li><p><span>Secrets management: Infisical.</span></p></li></ul><h5><span><strong>Who Thrives in This Role</strong></span></h5><ul><li><p><span>Engineers who understand systems deeply and enjoy solving complex infrastructure problems.</span></p></li><li><p><span>People who automate everything and dislike repetitive manual work.</span></p></li><li><p><span>Those who can take ownership of critical systems and support the team with expertise.</span></p></li><li><p><span>Individuals comfortable working in distributed teams and communicating clearly in English.</span></p></li></ul><h5><span><strong>What the Company Offers</strong></span></h5><ul><li><p><span>Fully remote, full‑time position with weekends off.</span></p></li><li><p><span>Work with international, high‑impact projects.</span></p></li><li><p><span>Opportunities for professional growth and specialization.</span></p></li><li><p><span>Competitive salary based on experience.</span></p></li><li><p><span>A young, friendly, and technically strong team.</span></p></li></ul><br></div><br> <p><strong>To apply:</strong> <a href="https://weworkremotely.com/remote-jobs/eer-poland-senior-devops-infrastructure-engineer">https://weworkremotely.com/remote-jobs/eer-poland-senior-devops-infrastructure-engineer</a></p>