— Аудит и оптимизация инфраструктуры двух проектов на AWS: ресурсы, настройки, безопасность, затраты. — Проверка и доработка файлового хранилища S3: доступы, шифрование, версионирование, lifecycle, CloudFront.
— Развертывание и эксплуатация инфраструктуры для генерации ZK-доказательств в промышленном масштабе. — Управление парком блокчейн-нод (Full nodes, Archive nodes) в различных сетях.
Опыт в DevOps: Опыт работы от 2–3 лет в эксплуатации высоконагруженных (Highload) распределенных ИТ-систем. Поддержание надежности (SRE): Обеспечение отказоустойчивости (High Availability) сквозных потоков данных (Data Flow) от распределенных систем банка до целевых хранилищ платформы мониторинга.
УдалённоleadГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Задачи:
— Сопровождать и развивать инфраструктуру АБ-платформы — сервис для запуска и обработки результатов A/B-тестов
— Конфигурировать и развёртывать инфраструктурные компоненты платформы, обеспечивать их отказоустойчивость и масштабируемость
— Заниматься построением и поддержкой CI/CD-пайплайнов: автоматизация сборки, тестирования и деплоя сервисов платформы
— Мониторить, диагностировать и устранять инциденты
— Автоматизировать эксплуатационные задачи и рутинные операции
— Взаимодействовать с командами разработки, QA и Data Engineering для обеспечения надёжности и наблюдаемости сервисов
Требования:
— Опыт работы в DevOps от 2 лет
— Уверенное знание GNU/Linux и Docker
— Опыт работы с Kubernetes (манифесты, Helm, операторы)
— Практический опыт построения CI/CD (Jenkins, GitLab CI)
— Опыт управления инфраструктурой как кодом (Ansible, включая написание ролей)
— Опыт работы с системами мониторинга и логирования (Prometheus, Grafana, ELK)
— Навыки написания скриптов на Python/Bash
— Понимание принципов observability: метрики, логи, трейсы
— Опыт работы с базами данных (PostgreSQL, ClickHouse) на уровне администрирования и бэкапов
Дополнительные плюсы:
— Опыт с event-driven архитектурами и распределёнными системами
— Опыт работы с Hadoop/Spark/Trino для обработки больших данных
— Опыт работы с apache airflow
— Проведение RCA и postmortem analysis
Условия:
— Стабильный и прозрачный доход: размер заработной платы обсуждается по итогам собеседования + квартальная премия по результатам KPI
— Сложные и интересные задачи, современный стек технологий
— Забота о здоровье: программа ДМС с первых дней работы, включая стоматологию, обслуживание в лучших клиниках города, страхование и компенсация 10-ти дней больничного
— Возможность вертикального и горизонтального карьерного роста: регулярные тренинги, вебинары, митапы и демо-дни
— Оплата посещения профильных конференций и курсов, помощь с подготовкой к публичным выступлениям и написанием статей на Хабр
— Доступ к бесплатным корпоративным библиотекам Alpina Digital, МИФ и бизнес-изданиям
— Возможность удаленной работы
Location: United States
Workplace: Remote
Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality.
Webflow is looking for a Lead Platform Engineer, Identity & Access to own how our workforce, devices, and automations authenticate and get access to what they need. Okta is our primary identity platform, and you’ll take it from a tool that works to a platform that is deliberately architected, governed, and easy to build on.
You’ll partner extensively with Security on policy, risk, and detection, bringing the engineering depth to turn their requirements into systems that run reliably. Making access safe by default without slowing people down is the central challenge of the role.
ABOUT THE ROLE:
- Location: Remote-first (United States)
- Full-time
- Permanent
- Exempt
- The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills.
- United States (all figures cited below are in USD and pertain to workers in the United States)
- Zone A: $232,000 - 290,000
- Zone B: $217,600 - 272,000
- Zone C: $204,800 - 256,000
This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals.
Please visit our Careers page https://webflow.com/careers#pay-zones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.
- Application Information:
- Application deadline: applications accepted on an ongoing basis until position is closed and filled
- This posting is for a new position
- Reporting to the Senior Director, Information Technology
AS A LEAD PLATFORM ENGINEER, IDENTITY & ACCESS, YOU’LL:
- Own the identity architecture and roadmap for workforce identity, with Okta as the core platform, including build versus buy decisions
- Bring our Okta tenant under proper management, with configuration standards, hardening, change control, and configuration as code (Terraform, APIs, Okta Workflows, or scripts where the platform falls short)
- Automate the identity lifecycle from joiner to leaver, using our HRIS as the source of truth and SCIM to downstream applications
- Build paved roads for application onboarding, including standard SSO patterns, provisioning templates, and federated access to our cloud and source control platforms, so app owners can integrate without platform team involvement
- Design the access model: role based access control (RBAC), least privilege, request and approval workflows, and access reviews, with tooling that answers “who has access to what, and why” and produces audit evidence automatically
- Strengthen how access is granted through phishing resistant MFA, device trust and risk signals, and governed non human identities (service accounts, tokens, OAuth grants, and AI tools and agents), and stream identity telemetry to Security for detection and response
- Serve as the top escalation point and primary responder for identity incidents and outages should they arise, including on call coverage for critical identity services, post incident reviews, and log analysis with Security
- Manage the Okta vendor relationship, licensing, and cost
ABOUT YOU:
REQUIREMENTS:
- Minimum of 8 years in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale
- Deep hands on experience architecting an enterprise identity provider, with Okta strongly preferred
- Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level
- Experience with identity governance, including RBAC design, HRIS driven lifecycle automation, and meeting audit requirements
- Strong grounding in Zero Trust and identity based attacks, including device trust and the security of non human identities
- Scripting ability (Python, JavaScript, or similar) and infrastructure as code experience, such as Terraform
- Clear communication with senior and executive audiences, including driving architecture decisions
- Nice to have: experience governing identities for AI tools and agents, and Okta certifications
You’ll thrive as a Lead Platform Engineer, Identity & Access if you:
- Design like an attacker, asking how every control could fail or be abused, and respect that one policy change can lock out the whole company
- Get results with Security, HR, and application owners through influence, not authority
- Care as much about adoption as correctness
- Bring order to an under managed environment without waiting for a perfect plan
- Use AI tools with good judgment
- Are comfortable as the lead identity expert, mentoring others and setting the standard
- Stay curious and open to growth — demonstrating a proactive embrace of AI, and actively building and applying fluency in emerging technologies to elevate how we work, drive faster outcomes, and expand collective impact.
OUR CORE BEHAVIORS
- Build lasting customer trust. We build trust by taking action that puts customer trust first.
- Win together. We play to win, and we win as one team. Success at Webflow isn't a solo act.
- Reinvent ourselves. We don't just improve what exists, we imagine what's possible.
- Own it all the way. We move fast because the moment demands it, and we hold ourselves accountable to deliver outcomes — for each other, and for customers.
BENEFITS
- Ownership in what you help build. Every permanent Webflower receives equity (RSUs) in our growing, privately held company.
- Health coverage that actually covers you. Comprehensive medical, dental, and vision plans for full-time employees and their dependents, with Webflow covering most premiums.
- Support for every stage of family life. 12 weeks of paid parental leave for all parents and 6+ weeks of additional paid leave for birthing parents. Plus inclusive care for family planning, menopause, and midlife transitions.
- Time off that’s actually off. Flexible vacation, paid holidays, and a sabbatical program to help you recharge and come back inspired.
- Wellness for the whole you. Access to mental health resources, therapy and coaching.
- Invest in your future. A 401(k) with 100% employer match (up to $6,000/year) in the U.S., and support for retirement savings globally.
- Monthly stipends that flex with your life. Localized support for work and wellness expenses — from Wi-Fi to workouts.
- Bonus for building together. All full-time, permanent, non-commission employees are eligible for our annual WIN bonus program.
Temporary employees may be eligible for paid holiday and time off, statutory leaves of absence, and company-sponsored medical benefits depending on their Fixed Term Contract and their country/state of employment.
BE YOU, WITH US
At Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed https://webflow.com/diversity-equity-inclusion to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law. Pursuant to the San Francisco Fair Chance Ordinance, Webflow will consider for employment qualified applicants with arrest and conviction records.
STAY CONNECTED
Not ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog https://webflow.com/blog, LinkedIn https://www.linkedin.com/company/webflow-inc-/, X (Twitter) https://twitter.com/webflow, and/or Glassdoor https://www.glassdoor.com/Reviews/Webflow-Reviews-E890506.htm.
PLEASE NOTE:
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Upon interview scheduling, instructions for accommodation requests will be administered.
To join Webflow, you'll need a valid right to work authorization depending on the country of employment.
If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes.
Webflow uses AI tools to assist in screening and evaluating applications. AI does not make final hiring decisions. For details on how we process your personal information, see Webflow’s Applicant Privacy Notice https://webflow.com/legal/applicant-privacy-notice.
Задачи:
— Автоматизировать процессы сборки, поставки и развертывания компонентов продукта
— Автоматизировать выдачу результатов продукта конечным потребителям, включая перевод текущих ручных процессов в автоматизированный формат
— Настраивать и развивать CI/CD-процессы для нескольких взаимосвязанных компонентов
— Автоматизировать поставку компонентов в витрины/целевые контуры
— Оптимизировать процессы сборки и доставки продукта с учетом требований к надежности и скорости поставки
— Участвовать в доработке и реализации технических требований, направленных на повышение надежности и критичности продукта
— Поддерживать и развивать инфраструктурные решения, необходимые для стабильной работы продукта
— Взаимодействовать с командами разработки, тестирования и эксплуатации для выстраивания эффективного процесса поставки
Требования:
— Опыт создания и администрирования кластеров Kubernetes
— Опыт написания автоматизации на ansible и jenkins
— Опыт администрирования Linux
— Понимание принципов работы виртуализации/контейнеризации
— Опыт в построении и поддержке отказоустойчивых систем
— Знание работы современных сетей
Будет плюсом:
— Разработка/умение читать golang-код
— Понимание REST API, gRPC, WebSocket, HTTP
— Умение автоматизировать тесты
— Опыт работы с VictoriaMetrics и Grafana
— Опыт работы с Keycloak
— Опыт работы с Hadoop, Ozone, Spark, Flink
— Опыт администрирования СУБД (PostgreSQL)
— Опыт отладки и профилирования приложений
Условия:
— Внутренние семинары, митапы
— ДМС со стоматологией для сотрудников и скидка на покупку ДМС для ближайших членов семьи
— Техника для комфортной работы
— Сессии профессионального развития персонала с планом индивидуального развития каждого сотрудника
• Build and run the device fleet that posts by code: iPhones first, Android too, real devices and cloud phones. • Publish across Instagram, TikTok, X, Reddit and Threads through platform APIs plus device and browser automation, hundreds of posts a day.
Поддерживать и развивать инфраструктуру дата‑платформы: HDFS, Spark, ClickHouse, Airflow и др. Запускать и эксплуатировать Ceph‑кластер с высокими требованиями к SLA.
Вам предстоит В направлении Pipelines вам предстоит: Заниматься разработкой и поддержкой универсальных Gitlab CI шаблонов для сборки, тестирования и деплоя проектов компании (деплой на VM через Ansible, в Kubernetes через Helm и ArgoCD); Создавать и поддерживать Helm чарты для различных сервисов;
Поддержка и эксплуатация высоконагруженной инфраструктуры Java-приложения на WebLogic. Администрирование и настройка Nginx и HAProxy: балансировка нагрузки, управление маршрутизацией, ограничение RPS для потребителей, переключение трафика между ветками.
-5+ years of experience in DevOps, Cloud Engineering, or Infrastructure Engineering. -4+ years of hands-on experience with GCP, Terraform, and Terragrunt.
We are looking for a Senior Platform Engineer on behalf of our client to build, scale, and maintain an Internal Developer Platform (IDP) that empowers application software teams to ship code safely, independently, and rapidly. Maintain cluster health, upgrade lifecycles, autoscaling policies, and security policies across multi-region Kubernetes deployments.
Design, implement, and manage scalable and highly available cloud infrastructure on Microsoft Azure. Develop and maintain automation scripts using tools such as Azure Resource Manager (ARM) templates, Terraform, and scripting languages (e.g., PowerShell, Bash) to automate infrastructure provisioning and configuration.
Создавать и поддерживать IaaS для множества собственных проектов компании на собственных ресурсах и арендуемых сервисах. Работать над повышением стабильности и отказоустойчивости инфраструктуры и инфраструктурных сервисов.
УдалённоFull remote или гибридный офис, работа из любой страны с удобным часовым поясом; Performance review и непрерывное обучение: у нас есть внутренняя Академия, а также много партнёрских программ, которые поделятся знаниям не только в профессиональной сфере, но и поддержат твои хобби
As an Operations Engineer, you'll apply AI at the forefront of BizTech's operational health: using LLM-powered triage and intelligent automation to resolve tickets, speed up incident response, and build self-healing observability that catches problems before they escalate. AI fluency is core to this role, not an add-on.
Location: Remote (Worldwide)
About Logos (λ)
Logos (λ)
is a movement of technologists, creatives, strategists, and activists working together to build a sovereign, people-owned technology stack that revitalises civil society and protects digital liberties at scale.
This position is within the IFT Technical Services (IFT-TS) Distributed Systems Testing (DST) Team, a team that primarily supports Logos, while also contributing to other IFT projects.
The role
We are seeking an experienced Distributed Systems Evaluation Engineer to join the Institute of Free Technology - Technical Services, on the Distributed Systems Testing (IFT-TS DST) team. This role focuses on rigorously assessing the performance and reliability of IFT projects at scale, where Logos (λ) is one of them.
Logos (λ) technology stack is composed of 3 main components:
Logos (λ) Blockchain
: Advanced privacy for a new era of decentralised applications and social institutions.
Logos (λ) Messaging
: Private peer‑to‑peer communication that resists surveillance and censorship.
Logos (λ) Storage
: Secure decentralised storage enabling fully decentralised apps and file sharing.
We are looking for a talented and enthusiastic DevOps Engineer to join our Distributed Systems Testing (DST) team.
You’ll be responsible for designing and executing comprehensive evaluation strategies, leveraging both large-scale lab deployments and protocol behavior modeling scripts. Your expertise will be crucial in analyzing these complex distributed systems, automating intricate test scenarios, and providing in-depth insights into system behaviors.
Working closely with cross-functional teams, you’ll troubleshoot complex issues and translate technical data into actionable recommendations. Proficiency in containerization, cloud technologies, and distributed systems principles is essential.
Key responsibilities
Design, configure, and optimize Kubernetes clusters to support large-scale experiments and benchmarks of P2P technologies.
Continuously improve cluster scalability and resource utilization, enabling increasingly complex deployments and experiments.
Set up, maintain, and optimize supporting infrastructure such as monitoring, logging, and observability stacks (Grafana, Prometheus, Loki, etc.).
Collaborate with DST researchers and engineers to streamline experimentation workflows and make analysis easier and more reproducible.
Automate infrastructure and deployment workflows to increase reliability and reduce overhead.
Troubleshoot, profile, and tune distributed workloads to ensure accurate and performant benchmarking.
Identify, reproduce, and debug complex issues in distributed systems, working closely with Logos development teams.
You ideally will have
Strong experience with Kubernetes and container orchestration in production or research environments.
Solid understanding of cloud infrastructure, Linux systems, and networking (especially relevant to distributed/P2P systems).
Familiarity with monitoring and logging tools (Grafana, Prometheus, VictoriaLogs, etc.).
Experience with infrastructure as code (Terraform, Ansible, Helm, etc.).
Proficiency in at least one scripting/programming language (ideally Python).
Interest in or experience with distributed systems, P2P networks, or blockchain technologies.
Experience with networks and systems programming.
Excellent written and conversational communication skills.
Alignment with our core values and principles.
Bonus points
Hands-on experience with libp2p or projects in the Logos collective.
Background in performance benchmarking, scalability testing, or systems research.
Contributions to open source projects.
Experience working for an open-source organization.
Interview Process
Interview with our POps team
Interview with team member from the IFT-TS DST team
Pair programming & discussion of results
Interview with IFT-TS team lead