高级DevOps/基础设施工程师
Senior DevOps / Infrastructure Engineer
资深DevOps/基础设施工程师负责构建、优化和维护高性能、安全且全球分布的基础设施。该职位需要对Linux系统、网络、监控、VPN技术和现代隐私导向环境中的流量规避技术有深入理解。
职位简介
你将设计并运营支持大规模高负载系统的关键基础设施。这项工作远不止容器管理：还包括内核级调优、高级网络、VPN栈工程，以及从零开始构建监控系统。这是一个适合了解系统在压力下的表现，并懂得如何自动化重复任务的人的职位。
主要职责
- 开发和演进基础设施架构，确保稳定性、可扩展性和高可用性。
- 使用GitLab、Ansible和Terraform构建和自动化CI/CD流水线。
- 维护和优化适用于高负载环境的Linux系统，包括内核调优和网络性能调整。
- 配置和改进监控系统（Zabbix、Grafana），包括自定义模板、自动发现和告警逻辑。
- 管理和优化VPN技术，如StrongSwan、OpenVPN和Xray。
- 分析复杂事件，识别根本原因，并实施长期解决方案。
- 通过访问控制、防火墙管理、更新和双因素认证确保基础设施安全。
- 在分布式环境中与开发和测试团队协作。
- 参与架构决策，并通过最佳实践指导团队。
核心技能与专长
监控工程
· 熟练使用Zabbix和Grafana，包括：
- 自定义模板，
- 自动发现规则，
- 外部脚本，
- 告警流程，
- 性能仪表盘。
Linux与内核优化
· 对高负载系统的内核和操作系统调优有深入理解：
- 网络I/O优化，
- socket缓冲区调优，
- IRQ亲和性与CPU中断平衡，
- 网卡队列配置，
- sysctl调优以提高吞吐量和延迟。
VPN技术
- 具备配置和优化以下技术的实际经验：
- StrongSwan（IPsec），
- OpenVPN，
- Xray-core（VLESS/REALITY、VMess、Shadowsocks）。
- 理解VPN协议在不同网络条件和审查环境下的行为。
DPI规避与流量混淆
· 了解DPI/TSPU架构和现代审查技术
查看英文原文
A Senior DevOps / Infrastructure Engineer in this role is responsible for building, optimizing, and maintaining a high‑performance, secure, and globally distributed infrastructure. The position requires deep expertise in Linux systems, networking, monitoring, VPN technologies, and traffic‑evasion techniques used in modern privacy‑focused environments.
About the Role
You will design and operate mission‑critical infrastructure that supports large‑scale, high‑load systems. The work goes far beyond container management: it involves kernel‑level tuning, advanced networking, VPN stack engineering, and building monitoring systems from the ground up. This is a role for someone who understands how systems behave under pressure and knows how to automate everything that repeats.
Key Responsibilities
- Develop and evolve infrastructure architecture to ensure stability, scalability, and high availability.
- Build and automate CI/CD pipelines using GitLab, Ansible, and Terraform.
- Maintain and optimize Linux systems for high‑load environments, including kernel tuning and network performance adjustments.
- Configure and improve monitoring systems (Zabbix, Grafana), including custom templates, auto‑discovery, and alerting logic.
- Manage and optimize VPN technologies such as StrongSwan, OpenVPN, and Xray.
- Analyze complex incidents, identify root causes, and implement long‑term fixes.
- Ensure infrastructure security through access control, firewall management, updates, and 2FA.
- Collaborate with development and QA teams in a distributed environment.
- Participate in architectural decisions and guide the team through best practices.
Core Skills and Expertise
Monitoring Engineering
·
Advanced proficiency with Zabbix and Grafana, including:
- custom templates,
- auto‑discovery rules,
- external scripts,
- alerting pipelines,
- performance dashboards.
Linux & Kernel Optimization
·
Deep understanding of kernel and OS tuning for high‑load systems:
- network I/O optimization,
- socket buffer tuning,
- IRQ affinity and CPU interrupt balancing,
- NIC queue configuration,
- sysctl tuning for throughput and latency.
VPN Technologies
- Hands‑on experience configuring and optimizing:
- StrongSwan (IPsec),
- OpenVPN,
- Xray-core (VLESS/REALITY, VMess, Shadowsocks).
- Understanding how VPN protocols behave under different network conditions and censorship environments.
DPI Evasion & Traffic Obfuscation
·
Knowledge of DPI/TSPU architecture and modern circumvention techniques:
- domain fronting,
- SNI masking,
- ECH (Encrypted Client Hello),
- REALITY,
- uTLS fingerprinting.
- Familiarity with obfuscation protocols such as Shadowsocks‑2022, Trojan‑GFW, and Cloak.
Additional Technical Areas
- Scripting: Bash, sed, awk; Go or Python for tooling and automation.
- Virtualization: Proxmox, Docker, Portainer.
- Networking: firewalls (nftables/iptables), routing, PBR, VLANs, GRE/IPIP tunnels, tun/tap, veth, bridges.
- Databases: PostgreSQL or MySQL (schema design, optimization, replication basics).
- Automation: Ansible, Terraform.
- Cloud: AWS, Cloudflare, Hetzner.
- Logging: Elastic Stack, OpenSearch, Vector, Promtail, Loki.
- Kubernetes on bare metal: deployment, CNI, storage, operations.
- Secrets management: Infisical.
Who Thrives in This Role
- Engineers who understand systems deeply and enjoy solving complex infrastructure problems.
- People who automate everything and dislike repetitive manual work.
- Those who can take ownership of critical systems and support the team with expertise.
- Individuals comfortable working in distributed teams and communicating clearly in English.
What the Company Offers
- Fully remote, full‑time position with weekends off.
- Work with international, high‑impact projects.
- Opportunities for professional growth and specialization.
- Competitive salary based on experience.
- A young, friendly, and technically strong team.
Originally posted on Himalayas