Job Details

System Administrator at PaynetEasy. Salary: from 300-400,000 Russian rubles (and above). Full-time employment, Russian Labor Code, Moscow office/hybrid.

Responsibilities: - Administration and support of infrastructure based on Linux. - Ensuring stability, performance, and security of servers and network equipment. - Management and monitoring of network services, VPNs, and tunnels. - Support of virtualization environment based on KVM. - Automation of routine tasks and processes. - Participation in the construction and development of the company's on-premise infrastructure.

Requirements: - Operating systems (Linux RPM-based) - Deep understanding of RHEL-like systems architecture. - Confident administration: AlmaLinux, Rocky Linux, CentOS Stream, RHEL, Fedora Server. - Deep understanding of systemd (writing units, timers, debugging dependencies); - Working with kernel subsystems, tuning via sysctl. - Disk management: LVM, XFS/EXT4 file systems, working with RAID (mdadm/hardware). - Performance analysis and troubleshooting (strace, tcpdump, lsof, iostat, vmstat). - Package management: confident work with dnf/yum; ability to create own packages (writing .spec files, working with rpmbuild); creation and maintenance of local repositories (createrepo, GPG package signing). - Confident knowledge of OSI model and TCP/IP stack. Understanding of DNS, DHCP, ARP, NAT (SNAT/DNAT/Masquerade) operation. - Experience configuring switches and routers (MikroTik, Cisco, Juniper or similar). - VLAN configuration (802.1Q), Trunk/Access ports, STP/RSTP, LACP (channel aggregation). - Routing: static, understanding of dynamic routing principles (OSPF/BGP - will be a plus). - Network diagnostics: ability to identify packet loss and delays (mtr, iperf, wireshark). - Experience configuring and tuning Nginx and/or HAProxy (load balancing, SSL termination, caching). - Working with Squid (forward proxy, ACL, authorization). - Building Site-to-Site and Client-to-Site VPNs. - Technologies: WireGuard (mandatory), OpenVPN, IPsec (StrongSwan/MikroTik). - Understanding of GRE, IPIP tunnel principles. - Virtualization: experience with KVM, libvirt, QEMU. Ability to manage VMs from the console (virsh). - Containers (desirable): experience with Podman or Docker, writing Dockerfile/Containerfile. - Scripting and automation: Bash, Ansible

We offer: - Full-time employment. - Flexible schedule possibility - Employment according to the Labor Code of the Russian Federation in an accredited IT company.