Senior DevOps / Infrastructure Engineer

About the Role

You will design and operate mission‑critical infrastructure that supports large‑scale, high‑load systems. The work goes far beyond container management: it involves kernel‑level tuning, advanced networking, VPN stack engineering, and building monitoring systems from the ground up. This is a role for someone who understands how systems behave under pressure and knows how to automate everything that repeats.

Key Responsibilities

• Develop and evolve infrastructure architecture to ensure stability, scalability, and high availability.
• Build and automate CI/CD pipelines using GitLab, Ansible, and Terraform.
• Maintain and optimize Linux systems for high‑load environments, including kernel tuning and network performance adjustments.
• Configure and improve monitoring systems (Zabbix, Grafana), including custom templates, auto‑discovery, and alerting logic.
• Manage and optimize VPN technologies such as StrongSwan, OpenVPN, and Xray.
• Analyze complex incidents, identify root causes, and implement long‑term fixes.
• Ensure infrastructure security through access control, firewall management, updates, and 2FA.
• Collaborate with development and QA teams in a distributed environment.
• Participate in architectural decisions and guide the team through best practices.

Core Skills and Expertise

Monitoring Engineering Advanced proficiency with Zabbix and Grafana, including:

• custom templates
• auto‑discovery rules
• external scripts
• alerting pipelines
• performance dashboards

Linux & Kernel Optimization Deep understanding of kernel and OS tuning for high‑load systems:

• network I/O optimization
• socket buffer tuning
• IRQ affinity and CPU interrupt balancing
• NIC queue configuration
• sysctl tuning for throughput and latency

VPN Technologies Hands‑on experience configuring and optimizing:

• StrongSwan (IPsec)
• OpenVPN
• Xray-core (VLESS/REALITY, VMess, Shadowsocks)

Understanding how VPN protocols behave under different network conditions and censorship environments.

DPI Evasion & Traffic Obfuscation Knowledge of DPI/TSPU architecture and modern circumvention techniques:

• domain fronting
• SNI masking
• ECH (Encrypted Client Hello)
• REALITY
• uTLS fingerprinting

Familiarity with obfuscation protocols such as Shadowsocks‑2022, Trojan‑GFW, and Cloak.

Additional Technical Areas

• Scripting: Bash, sed, awk; Go or Python for tooling and automation.
• Virtualization: Proxmox, Docker, Portainer.
• Networking: firewalls (nftables/iptables), routing, PBR, VLANs, GRE/IPIP tunnels, tun/tap, veth, bridges.
• Databases: PostgreSQL or MySQL (schema design, optimization, replication basics).
• Automation: Ansible, Terraform.
• Cloud: AWS, Cloudflare, Hetzner.
• Logging: Elastic Stack, OpenSearch, Vector, Promtail, Loki.
• Kubernetes on bare metal: deployment, CNI, storage, operations.
• Secrets management: Infisical.

Who Thrives in This Role

Engineers who understand systems deeply and enjoy solving complex infrastructure problems. People who automate everything and dislike repetitive manual work. Those who can take ownership of critical systems and support the team with expertise. Individuals comfortable working in distributed teams and communicating clearly in English.

What the Company Offers

• Fully remote, full‑time position with weekends off.
• Work with international, high‑impact projects.
• Opportunities for professional growth and specialization.
• Competitive salary based on experience.
• A young, friendly, and technically strong team.

To apply: https://weworkremotely.com/remote-jobs/eer-poland-senior-devops-infrastructure-engineer