DevOps Engineer

Seeking a DevOps Engineer to fully own infrastructure: server/VPS procurement, hardening, VPN, Docker, AWS, and stable production deployment. Full-time, remote.

We are looking for a DevOps engineer ready to take full responsibility for the infrastructure — from purchasing hardware and setting up VPS to hardening, VPN, and stable production deployment. We need an engineer who understands servers, networking, security, and production, and is ready to take systematic responsibility for infrastructure. Responsibilities: - Select and purchase servers/VPS for tasks - Commission servers into operation - Maintain infrastructure in working condition - Work with Docker images, networks, and volumes - Set up deployment and rollback - Organize log storage and viewing - Ensure containers are isolated and do not create unnecessary risks - Work with AWS without unnecessary 'cloud magic': - Set up secure SSH access - Set up firewall - Keep packages and OS up to date - Conduct basic infrastructure audit - TLS/SSL - DNS - Reverse proxy - Separation of public and administrative contours - Backups - Document infrastructure

Important skills: - Linux: systemd; networking; disks and file systems; users and permissions; packages; troubleshooting - Docker: not just docker compose up on a laptop, but real production operation - WireGuard/VPN: understanding of keys, routes, peers, split access, network segmentation - AWS: minimum EC2; VPC/networking; IAM; S3 - Terraform/CloudFormation — a big plus, but not a mandatory filter - Hardening: understanding of basic server security Nice to have: - Caddy/Nginx - CI/CD — GitHub Actions/GitLab CI - GHCR - Experience with multiple VPS - Separation of app/edge - Separate administrative contour - PostgreSQL from an operations perspective: backups; access; recovery - Understanding of typical attacks on: SSH; control panels; docker.sock + Swarm + K8s - Ansible or custom scripts for automating server configuration We need an engineer who: - is not afraid of production; - can independently figure out problems; - understands the consequences of their changes; - thinks about security in advance; - dislikes manual routine and automates it; - can explain to developers why something is insecure and propose a proper solution; - is able to look at the infrastructure as a whole, not just a single Docker container.

Full-time Remote