DevOps Engineer

Remote full-time DevOps Engineer needed to own infrastructure end-to-end: server provisioning, Docker, AWS, VPN, hardening, and stable production deployment.

We are looking for a DevOps engineer ready to take full ownership of infrastructure — from purchasing hardware and setting up VPS to hardening, VPN, and stable production deployment. We need an engineer who understands servers, networking, security, and production, and can take systemic responsibility for infrastructure. Responsibilities: - Select and purchase servers/VPS for tasks - Commission servers into operation - Maintain infrastructure in working condition - Work with Docker images, networks and volumes - Set up deployment and rollback - Organize log storage and viewing - Ensure containers are isolated and do not create unnecessary risks - Work with AWS without unnecessary "cloud magic": set up secure SSH access, configure firewall, keep packages and OS up to date, conduct basic infrastructure audit - TLS/SSL, DNS, reverse proxy - Separation of public and administrative perimeters - Backups - Document infrastructure

What is important to be able to do: - Linux: systemd, networking, disks and file systems, users and permissions, packages, troubleshooting - Docker: not just docker compose up on a laptop, but real production operation - WireGuard/VPN: understanding of keys, routes, peers, split access, network segmentation - AWS: minimum EC2, VPC/networking, IAM, S3 - Hardening: understanding of basic server security Nice to have: - Terraform/CloudFormation (big plus, but not a mandatory filter) - Caddy/Nginx - CI/CD — GitHub Actions/GitLab CI - GHCR - Experience with multiple VPS - Separation of app/edge - Separate administrative perimeter - PostgreSQL from an operations perspective: backups, access, recovery - Understanding of typical attacks on SSH, control panels, docker.sock + Swarm + K8s - Ansible or custom scripts for automating server configuration

Remote work, full-time. The engineer we need: not afraid of production; able to independently solve problems; understands the consequences of their changes; thinks about security in advance; dislikes manual routine and automates it; can explain to developers why something is insecure and propose a proper solution; can look at infrastructure as a whole, not just a single Docker container.