Job Details

Linux System Administrator at PaynetEasy. Salary: from 300-450,000 Russian rubles (and above). Full-time, hybrid/office/remote. Responsibilities include Linux infrastructure administration, ensuring stability, performance, and security, managing network services, virtualization, and task automation.

Responsibilities: - Administration and support of Linux-based infrastructure. - Ensuring stability, performance, and security of servers and network equipment. - Management and monitoring of network services, VPN, and tunnels. - Support of KVM-based virtualization environment. - Automation of routine tasks and processes. - Participation in the construction and development of the company's on-premise infrastructure.

Requirements: - Operating Systems (Linux RPM-based) - Deep understanding of RHEL-like systems architecture. - Confident administration: AlmaLinux, Rocky Linux, CentOS Stream, RHEL, Fedora Server. - Deep understanding of systemd (writing units, timers, debugging dependencies); - Working with kernel subsystems, tuning via sysctl. - Disk management: LVM, XFS/EXT4 file systems, RAID (mdadm/hardware) work. - Performance analysis and troubleshooting (strace, tcpdump, lsof, iostat, vmstat). - Package management: confident work with dnf/yum; ability to create own packages (writing .spec files, working with rpmbuild); creation and maintenance of local repositories (createrepo, GPG package signing). - Confident knowledge of OSI model and TCP/IP stack. Understanding of DNS, DHCP, ARP, NAT (SNAT/DNAT/Masquerade) operation. - Experience configuring switches and routers (MikroTik, Cisco, Juniper or similar). - VLAN configuration (802.1Q), Trunk/Access ports, STP/RSTP, LACP (channel aggregation). - Routing: static, understanding of dynamic principles (OSPF/BGP - will be a plus). - Network diagnostics: ability to identify packet loss and delays (mtr, iperf, wireshark). - Experience configuring and tuning Nginx and/or HAProxy (load balancing, SSL termination, caching). - Working with Squid (forward proxy, ACL, authorization). - Building Site-to-Site and Client-to-Site VPN. - Technologies: WireGuard (mandatory), OpenVPN, IPsec (StrongSwan/MikroTik). - Understanding of GRE, IPIP tunnel principles. - Virtualization: experience with KVM, libvirt, QEMU. Ability to manage VMs from the console (virsh). - Containers (desirable): experience with Podman or Docker, writing Dockerfile/Containerfile. - Scripting and automation: Bash, Ansible

We offer: - Full-time employment. - Flexible schedule option - Employment according to the Labor Code of the Russian Federation in an accredited IT company.