Join a fast-growing cybersecurity company specializing in world-class privacy and security solutions. We are vocal advocates for civil rights, digital freedom, and an uncensored online culture.
We are looking for an experienced Lead DevOps Engineer who thrives on solving complex challenges and is ready to make a massive impact on a high-traffic product at the intersection of security, massive scale, and digital freedom.
About the role
Technical lead of the infrastructure domain for a VPN platform (Kubernetes, multi-cluster, multi-region, with its own VPN data plane). Owns infrastructure architecture, personally handles the most complex infrastructure tasks, and manages a team of junior DevOps engineers.
What you will do
- Infrastructure architecture— design and evolution of the platform: K8s clusters, GitOps, networking, secrets, observability, VPN data plane.
- Technology choices and trade-off analysis, multi-region topology, migration planning.
- Complex infrastructure tasks— work that isn't delegated: debugging network connectivity and VPN routing, scaling, disaster recovery, designing egress / site-to-site / edge topologies, non-standard networking scenarios.
- Build & software delivery— CI/CD pipelines, container image builds, and delivery to environments (dev/stage/prod) via GitOps.
- Application source code is owned by the respective backend and frontend team leads; this role owns the build and delivery mechanism (and all infrastructure beneath it), not the application code itself.
- Team leadership— assigning and distributing work across junior DevOps engineers, reviewing infrastructure code, mentoring, growing the team.
What we are looking for
- Kubernetes & orchestration
- Strong production experience with Kubernetes (managed: OVH MKS; Yandex Managed K8s planned)
- Helm — authoring shared chart libraries, dependency management, per-environment value overlays
- Harbor (or equivalent container registry)
- GitOps & CI/CD
- ArgoCD — ApplicationSets, AppProjects, multi-cluster deployments, sync policies / sync windows
- GitLab CI — pipelines, multi-project triggers, reusable templates
- Owning the image-build and software-delivery process across environments
- IaC & provisioning
- Terraform (OVH, AWS, Proxmox, Yandex Cloud)
- Ansible
- Proxmox — VMs for VPN gateways
- Secrets
- Infisical (or Vault / equivalent)
- External Secrets Operator
- Stateful services (K8s operators)
- CloudNativePG (PostgreSQL) — clusters, backups, WAL / PITR
- RabbitMQ Cluster Operator
- Redis (ot-container-kit)
- Centrifugo (realtime messaging)
- Networking, Ingress, TLS, DNS
- Traefik — IngressRoute / IngressRouteTCP, split-LB
- cert-manager — Let's Encrypt (DNS-01)
- external-dns, Cloudflare
- CoreDNS (split-horizon), PowerDNS
- Stakater Reflector
- Observability
- Prometheus / kube-prometheus-stack, Grafana, Loki, Alloy, Alertmanager
- Programming (infrastructure microservices & automation)
- Go — network gateway services (PBR / NAT / firewall, DNS reconciler)
- Bash, Python
- Networking & VPN data-plane expertise (critical)
- Dynamic routing — OSPF / FRR, BGP (including setups with multiple routing tables / VRF-style routing)
- Policy-Based Routing (PBR) — ip rule+ custom routing tables
- VPN protocols: current — OpenVPN (with obfuscation), XRay, IKEv2 / IPsec; future — AmneziaWG / WireGuard and similar
- RADIUS / RadSec (RADIUS-over-TLS), FreeRADIUS, StrongSwan / IPsec
- Linux networking — TCP/IP, TLS, NAT / MASQUERADE (nftables / iptables), tun/tap, kernel routing
- Cloud
- OVH (Managed Kubernetes, Object Storage, Load Balancer, Gateway / vRack)
- AWS
- Yandex Cloud
Nice to have
Experience with security systems that inspect network traffic for malicious code — IDS / IPS, DPI (e.g., Suricata, Snort, Zeek).
What We Offer
- Build personal AI agents using our premium infrastructure.
- Absolute freedom to work (GMT+1– GMT+4).
- Internal R&D opportunities.
- Paid time off and sick leave.
- Direct impact on a massive, world-class B2B product.
- A collaborative environment with some of the best minds.
- Hardware upon completion of your probation.
If this sounds like you, we’ve been waiting for you! Let’s build the future of digital freedom together. Apply now.
Plus