Инфраструктура и безопасность вакансии - удалённо

As a Senior Technical Solutions Consultant, you'll play a key role on our Global Support team, helping customers solve complex technical challenges across CaptivateIQ's platform. You'll take ownership of challenging issues involving calculations, configuration, data modeling, integrations, and product functionality.

— администрирование Oracle Database 19c в PROD, UAT и других средах; — RMAN backup, recovery, restore tests и перенос данных между средами;

-Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services. -5+ years of experience in product security, application security, security engineering, or software engineering, including experience operating at a senior or staff level.

Компания: Lagrange Labs Формат: remote Уровень ЗП: от 5 000 до 7 000 USD Занятость: full-time 🖥 Формат Удалённая 🕹 Работодатель Lagrange Labs 🕹 Список обязанностей: — Развертывание и эксплуатация инфраструктуры для генерации ZK-доказательств в промышленном масштабе. — Управление парком блокчейн-нод (Full nodes, Archive nodes) в различных сетях.

Задачи: — Разработка и поддержание текущей инфраструктуры и CI/CD пайплайнов с использованием GitLab CI и ArgoCD — Поддержка развертывания приложений в тестовой и продуктивной средах — Настройка мониторинга и логирования, помощь в расследовании инцидентов Требования: — Опыт DevOps более 7 лет — Уверенный практический опыт работы с AWS SDK, Kubernetes, Docker и Terraform — Опыт работы с Helm, GitOps и инструментами мониторинга — Практические знания Linux, сетевых технологий, скриптов на Shell или Python — Английский язык уровня C1 Условия: — Работа удаленная (часовые пояса UTC+2 to UTC+4)

We are seeking a Senior DevOps Engineer to join a global fintech organization, working remotely within UTC+2 to UTC+4 time zones. The role involves developing and managing existing infrastructure and CI/CD pipelines utilizing GitLab CI and ArgoCD, supporting application deployments across testing and production stages, and implementing monitoring and logging systems to assist in incident analysis. Candidates should have over seven years of experience in DevOps, with strong practical skills in AWS SDK, Kubernetes, Docker, and Terraform. Familiarity with Helm, GitOps, and monitoring solutions is required, along with solid knowledge of Linux, networking, and scripting in Shell or Python. Proficiency in English at the C1 level is necessary. Additional experience in DevSecOps, Ansible, or Go is considered advantageous.

5+ лет с многоплощадочными корпоративными сетями, 2+ проекта аудита или обследования.

— Аудит и оптимизация инфраструктуры двух проектов на AWS: ресурсы, настройки, безопасность, затраты. — Проверка и доработка файлового хранилища S3: доступы, шифрование, версионирование, lifecycle, CloudFront.

Задачи: — Разбирать результаты сканирования уязвимостей, системных аудитов и события в логах; — Воспроизводить проблемы клиентов в лабораторной среде и взаимодействовать с разработкой; — Готовить статьи базы знаний и применять AI для автоматизации поддержки. Требования: — Свободный арабский язык и готовность работать с воскресенья по четверг; — От 2 лет опыта с TCP/IP, администрированием Linux, Windows или macOS и установкой обновлений; — Опыт технической поддержки корпоративных клиентов и диагностики сложных проблем; — Готовность к дежурствам по выходным и праздникам; — Удалённая работа из ОАЭ или Саудовской Аравии.

— Развертывание и эксплуатация инфраструктуры для генерации ZK-доказательств в промышленном масштабе. — Управление парком блокчейн-нод (Full nodes, Archive nodes) в различных сетях.

Аудит корпоративной сети промышленного предприятия: конфигурации коммутаторов и маршрутизаторов Cisco, межсетевых экранов FortiGate, беспроводной сети. Проверка серверной инфраструктуры: VMware, СХД и SAN, Active Directory, Exchange, SQL Server, антивирусная защита, резервное копирование.

Опыт в DevOps: Опыт работы от 2–3 лет в эксплуатации высоконагруженных (Highload) распределенных ИТ-систем. Поддержание надежности (SRE): Обеспечение отказоустойчивости (High Availability) сквозных потоков данных (Data Flow) от распределенных систем банка до целевых хранилищ платформы мониторинга.

Задачи: — Сопровождать и развивать инфраструктуру АБ-платформы — сервис для запуска и обработки результатов A/B-тестов — Конфигурировать и развёртывать инфраструктурные компоненты платформы, обеспечивать их отказоустойчивость и масштабируемость — Заниматься построением и поддержкой CI/CD-пайплайнов: автоматизация сборки, тестирования и деплоя сервисов платформы — Мониторить, диагностировать и устранять инциденты — Автоматизировать эксплуатационные задачи и рутинные операции — Взаимодействовать с командами разработки, QA и Data Engineering для обеспечения надёжности и наблюдаемости сервисов Требования: — Опыт работы в DevOps от 2 лет — Уверенное знание GNU/Linux и Docker — Опыт работы с Kubernetes (манифесты, Helm, операторы) — Практический опыт построения CI/CD (Jenkins, GitLab CI) — Опыт управления инфраструктурой как кодом (Ansible, включая написание ролей) — Опыт работы с системами мониторинга и логирования (Prometheus, Grafana, ELK) — Навыки написания скриптов на Python/Bash — Понимание принципов observability: метрики, логи, трейсы — Опыт работы с базами данных (PostgreSQL, ClickHouse) на уровне администрирования и бэкапов Дополнительные плюсы: — Опыт с event-driven архитектурами и распределёнными системами — Опыт работы с Hadoop/Spark/Trino для обработки больших данных — Опыт работы с apache airflow — Проведение RCA и postmortem analysis Условия: — Стабильный и прозрачный доход: размер заработной платы обсуждается по итогам собеседования + квартальная премия по результатам KPI — Сложные и интересные задачи, современный стек технологий — Забота о здоровье: программа ДМС с первых дней работы, включая стоматологию, обслуживание в лучших клиниках города, страхование и компенсация 10-ти дней больничного — Возможность вертикального и горизонтального карьерного роста: регулярные тренинги, вебинары, митапы и демо-дни — Оплата посещения профильных конференций и курсов, помощь с подготовкой к публичным выступлениям и написанием статей на Хабр — Доступ к бесплатным корпоративным библиотекам Alpina Digital, МИФ и бизнес-изданиям — Возможность удаленной работы

Location: United States Workplace: Remote Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality. Webflow is looking for a Lead Platform Engineer, Identity & Access to own how our workforce, devices, and automations authenticate and get access to what they need. Okta is our primary identity platform, and you’ll take it from a tool that works to a platform that is deliberately architected, governed, and easy to build on. You’ll partner extensively with Security on policy, risk, and detection, bringing the engineering depth to turn their requirements into systems that run reliably. Making access safe by default without slowing people down is the central challenge of the role. ABOUT THE ROLE: - Location: Remote-first (United States) - Full-time - Permanent - Exempt - The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills. - United States (all figures cited below are in USD and pertain to workers in the United States) - Zone A: $232,000 - 290,000 - Zone B: $217,600 - 272,000 - Zone C: $204,800 - 256,000 This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals. Please visit our Careers page https://webflow.com/careers#pay-zones for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. - Application Information: - Application deadline: applications accepted on an ongoing basis until position is closed and filled - This posting is for a new position - Reporting to the Senior Director, Information Technology AS A LEAD PLATFORM ENGINEER, IDENTITY & ACCESS, YOU’LL: - Own the identity architecture and roadmap for workforce identity, with Okta as the core platform, including build versus buy decisions - Bring our Okta tenant under proper management, with configuration standards, hardening, change control, and configuration as code (Terraform, APIs, Okta Workflows, or scripts where the platform falls short) - Automate the identity lifecycle from joiner to leaver, using our HRIS as the source of truth and SCIM to downstream applications - Build paved roads for application onboarding, including standard SSO patterns, provisioning templates, and federated access to our cloud and source control platforms, so app owners can integrate without platform team involvement - Design the access model: role based access control (RBAC), least privilege, request and approval workflows, and access reviews, with tooling that answers “who has access to what, and why” and produces audit evidence automatically - Strengthen how access is granted through phishing resistant MFA, device trust and risk signals, and governed non human identities (service accounts, tokens, OAuth grants, and AI tools and agents), and stream identity telemetry to Security for detection and response - Serve as the top escalation point and primary responder for identity incidents and outages should they arise, including on call coverage for critical identity services, post incident reviews, and log analysis with Security - Manage the Okta vendor relationship, licensing, and cost ABOUT YOU: REQUIREMENTS: - Minimum of 8 years in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale - Deep hands on experience architecting an enterprise identity provider, with Okta strongly preferred - Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level - Experience with identity governance, including RBAC design, HRIS driven lifecycle automation, and meeting audit requirements - Strong grounding in Zero Trust and identity based attacks, including device trust and the security of non human identities - Scripting ability (Python, JavaScript, or similar) and infrastructure as code experience, such as Terraform - Clear communication with senior and executive audiences, including driving architecture decisions - Nice to have: experience governing identities for AI tools and agents, and Okta certifications You’ll thrive as a Lead Platform Engineer, Identity & Access if you: - Design like an attacker, asking how every control could fail or be abused, and respect that one policy change can lock out the whole company - Get results with Security, HR, and application owners through influence, not authority - Care as much about adoption as correctness - Bring order to an under managed environment without waiting for a perfect plan - Use AI tools with good judgment - Are comfortable as the lead identity expert, mentoring others and setting the standard - Stay curious and open to growth — demonstrating a proactive embrace of AI, and actively building and applying fluency in emerging technologies to elevate how we work, drive faster outcomes, and expand collective impact. OUR CORE BEHAVIORS - Build lasting customer trust. We build trust by taking action that puts customer trust first. - Win together. We play to win, and we win as one team. Success at Webflow isn't a solo act. - Reinvent ourselves. We don't just improve what exists, we imagine what's possible. - Own it all the way. We move fast because the moment demands it, and we hold ourselves accountable to deliver outcomes — for each other, and for customers.   BENEFITS - Ownership in what you help build. Every permanent Webflower receives equity (RSUs) in our growing, privately held company. - Health coverage that actually covers you. Comprehensive medical, dental, and vision plans for full-time employees and their dependents, with Webflow covering most premiums. - Support for every stage of family life. 12 weeks of paid parental leave for all parents and 6+ weeks of additional paid leave for birthing parents. Plus inclusive care for family planning, menopause, and midlife transitions. - Time off that’s actually off. Flexible vacation, paid holidays, and a sabbatical program to help you recharge and come back inspired. - Wellness for the whole you. Access to mental health resources, therapy and coaching. - Invest in your future. A 401(k) with 100% employer match (up to $6,000/year) in the U.S., and support for retirement savings globally. - Monthly stipends that flex with your life. Localized support for work and wellness expenses — from Wi-Fi to workouts. - Bonus for building together. All full-time, permanent, non-commission employees are eligible for our annual WIN bonus program.   Temporary employees may be eligible for paid holiday and time off, statutory leaves of absence, and company-sponsored medical benefits depending on their Fixed Term Contract and their country/state of employment.   BE YOU, WITH US At Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed https://webflow.com/diversity-equity-inclusion to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law. Pursuant to the San Francisco Fair Chance Ordinance, Webflow will consider for employment qualified applicants with arrest and conviction records.   STAY CONNECTED Not ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog https://webflow.com/blog, LinkedIn https://www.linkedin.com/company/webflow-inc-/, X (Twitter) https://twitter.com/webflow, and/or Glassdoor https://www.glassdoor.com/Reviews/Webflow-Reviews-E890506.htm.   PLEASE NOTE: We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Upon interview scheduling, instructions for accommodation requests will be administered. To join Webflow, you'll need a valid right to work authorization depending on the country of employment. If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes. Webflow uses AI tools to assist in screening and evaluating applications. AI does not make final hiring decisions. For details on how we process your personal information, see Webflow’s Applicant Privacy Notice https://webflow.com/legal/applicant-privacy-notice.

Задачи: — Автоматизировать процессы сборки, поставки и развертывания компонентов продукта — Автоматизировать выдачу результатов продукта конечным потребителям, включая перевод текущих ручных процессов в автоматизированный формат — Настраивать и развивать CI/CD-процессы для нескольких взаимосвязанных компонентов — Автоматизировать поставку компонентов в витрины/целевые контуры — Оптимизировать процессы сборки и доставки продукта с учетом требований к надежности и скорости поставки — Участвовать в доработке и реализации технических требований, направленных на повышение надежности и критичности продукта — Поддерживать и развивать инфраструктурные решения, необходимые для стабильной работы продукта — Взаимодействовать с командами разработки, тестирования и эксплуатации для выстраивания эффективного процесса поставки Требования: — Опыт создания и администрирования кластеров Kubernetes — Опыт написания автоматизации на ansible и jenkins — Опыт администрирования Linux — Понимание принципов работы виртуализации/контейнеризации — Опыт в построении и поддержке отказоустойчивых систем — Знание работы современных сетей Будет плюсом: — Разработка/умение читать golang-код — Понимание REST API, gRPC, WebSocket, HTTP — Умение автоматизировать тесты — Опыт работы с VictoriaMetrics и Grafana — Опыт работы с Keycloak — Опыт работы с Hadoop, Ozone, Spark, Flink — Опыт администрирования СУБД (PostgreSQL) — Опыт отладки и профилирования приложений Условия: — Внутренние семинары, митапы — ДМС со стоматологией для сотрудников и скидка на покупку ДМС для ближайших членов семьи — Техника для комфортной работы — Сессии профессионального развития персонала с планом индивидуального развития каждого сотрудника

💎Опыт разработки приложений на Go, Linux, Docker, good written English.

— Изучение продукта и процессов поддержки; — Решение кейсов во взаимодействии с внутренними командами;

Location: Remote Workplace: Remote Kit https://kit.com/ is the email marketing platform experts choose to grow their audience, deepen their relationships, and build a business around the work they love. For coaches, YouTubers, authors, podcasters, and other creatives, there isn't a better marketing hub to rely on to grow audiences, automate email marketing, and sell digital products — all within one platform. More importantly, there isn't a team more committed to helping creators earn a living. We're on a mission to help creators earn $1 billion using our creator marketing platform. We have always been 100% independent and 100% remote. We are proud to have built a product that our customers love, and we look for people who have enthusiasm and belief in our mission, vision, and values to join our team. We're also embracing AI thoughtfully — both in how we build and how we hire to ensure our team is adaptable, innovative, and ready for what's next. THE ROLE We're looking for a Senior Infrastructure Engineer II to take ownership of a large share of Kit's core infrastructure: databases, Kubernetes, version upgrades, platform tooling, and day-to-day support. You'll also build the paved paths that let engineers, non-engineers, and AI agents test and ship changes safely. The infrastructure supports creators who depend on Kit to reach their audiences and earn a living. When it's healthy, nobody notices. That's the job. This is a full-time Individual Contributor role for an experienced infrastructure engineer who likes owning production systems end to end, takes on-call seriously, leans into automation and enjoys making other people's work easier.   YOUR SUPPORT SYSTEM You'll report to Mojtaba Hosseini https://www.linkedin.com/in/mojtaba-hosseini-7a6666/, VP of Engineering at Kit. Day to day, you'll work most closely with Kris Hamoud https://www.linkedin.com/in/kristopher-hamoud-17b34665/ and Ivan Mora Perez https://www.linkedin.com/in/ivan-mora-p%C3%A9rez-ab460b45/. You'll also partner with product engineers across Kit, and with teams outside engineering who rely on infrastructure to get their work done. Once you're ramped up, you'll join a three-person on-call rotation, which works out to roughly one week in three.   WHAT YOU'LL DO - First Week: Get access to our AWS accounts, Kubernetes clusters, monitoring, and CI/CD pipelines. Read through our runbooks and architecture docs. Take part in Get To Know Yous (GTKYs) with Kris, Ivan, and the engineering teams you'll support. - First Month: Pick up day-to-day infrastructure support requests and start working through them with Kris and Ivan as backup. Ship your first improvement, such as a version upgrade or a fix to a gap in monitoring. Shadow on-call shifts. Write down what you learn along the way, especially the parts that only lived in someone's head or those that can be automated or improved. - First Six Months: Own core infrastructure areas end to end: databases, Kubernetes, version upgrades, and platform tooling. Take your full share of on-call, which you'll start by the end of your first quarter. Become the go-to person for day-to-day infrastructure questions. Find one recurring source of pages and make it go away. Ship a first paved path, such as a sandbox environment where AI agents or non-engineers can safely build and test changes. - First Year: You're the primary owner of a large part of Kit's core infrastructure, and you lead projects in it without needing direction. Uptime stays at 99.9% or better, page volume is down, and you've found real cost savings. Your paved paths are in regular use by engineers, non-engineers, and AI agents. You've built observability good enough for AI agents to handle some on-call load. You've documented your decisions so others can build on your work.     WHAT WILL S.E.T. YOU UP FOR SUCCESS   Skills - Running production infrastructure on AWS at scale, including managed relational databases, networking, and load balancing - Operating Kubernetes in production: upgrades, capacity planning, and troubleshooting - Managing infrastructure as code and maintaining CI/CD pipelines that engineers trust - Building monitoring and alerting that catches real problems early and doesn't page people for noise - Diagnosing complex, multi-service incidents calmly, then fixing the underlying cause - Cutting cloud costs through right-sizing and reserved capacity without hurting reliability - Writing clear runbooks, docs, and decision write-ups - Nice to have: experience with Cloudflare, ephemeral or sandbox environments, or email sending infrastructure Experiences - Around 7 or more years in infrastructure, platform, DevOps, or SRE roles - Owning production infrastructure for a product where downtime costs customers money - Carrying a pager for systems you owned, and making that on-call rotation quieter over time - Leading a major upgrade or migration, such as a database or Kubernetes version upgrade, with little or no customer impact - Building self-service tooling or paved paths that other engineers actually adopted - Working on a small infrastructure team where you couldn't hand problems off to a specialist Traits - You own what you run. You spot infrastructure debt and fix it without waiting to be asked, and you follow through until it's done. - You build quality into the work. Upgrades have rollback plans, maintenance windows are planned around customers, and "good enough" is a decision, not a default. - You leverage AI effectively. AI helps you increase quality and velocity where it matters most. You know when to delegate and when to dive in, while holding accountability. - You make work easier for everyone else. You'd rather build a tool or write a guide once than answer the same question ten times. - You teach what you know. You write things down so the next person, or the next AI agent, can build on your work. - You work in public. You share context and tradeoffs openly, including during incidents and when things go wrong. - You use AI thoughtfully. It's part of how you work, and you help others adopt it without creating new risks. - You remember who's on the other end. An outage means a creator's launch email doesn't go out, and that shapes how you prioritize.   WHAT WON'T SET YOU UP FOR SUCCESS - Wanting a well-defined backlog handed to you each week. Here, you'll find much of the work yourself and set priorities with Kris. - Preferring not to be on call. On-call is a core part of this role, shared across a team of three. - You are skeptical of AI’s capabilities, or conversely use AI without good judgement and accountability. - Wanting mostly greenfield architecture. A lot of this work is running, upgrading, and improving systems that already exist. - Needing layers of approval before acting.   WORKING HOURS AND LOCATION We're 100% remote with team members across the globe. We work mostly on East Coast time—so if you're based on the West Coast of the United States, Europe, or Asia, you might have a few early mornings or late evenings. We do our best to keep things reasonable, but a little time zone juggling comes with the territory. This role is part of a three-person on-call rotation, so during your on-call week you'll need to be able to respond to pages outside your usual working hours. We believe PTO should always take priority over on-call. We schedule on-call around people's lives, not the other way around. On-call is a shared responsibility, but taking time off should never be a challenge   COMPENSATION + PERKS + BENEFITS Kit has standardized salaries based on position, no matter where you live. For this role, we're hiring at our level 4 ($197,000). Level is determined based on experience and our interview process.   PERKS + BENEFITS INCLUDE: - Profit Sharing https://www.linkedin.com/feed/update/urn:li:activity:7454911054947688448/ - Kit equity - 401k with a 5% match - We cover up to $2,100 per month toward medical premiums, with dental and vision premiums fully covered. We offer Health Insurance plans through Aetna - $2,000 equipment allowance for your first two years, $1,000 budget every following two years. Company-provided laptops are issued to every Kit team member and are not included in the equipment budget - Individual learning + development budget ($3,500/year) - Creator meetup budget ($50/month) to connect with creators over coffee, lunch, or other in-person meetups - Gender affirming benefits - Childcare benefit up to $3,000 annually through JOON - Twenty (20) days of paid time off during each year of employment - Paid paid vacation: An after-tax bonus of $1,000 for taking five consecutive days of vacation where you’re fully unplugged from work - Ten (10) paid holidays a year - Two weeks of paid sick time each year, including mental health + well being days - Twelve (12) weeks paid parental leave and flexible scheduling in your child’s first year - Up to six weeks of paid bereavement leave, medical leave, and disaster after six months of employment, two weeks of each paid leave in your first six months - Winter Break Closure: Kit closes for a week at the end of December, giving everyone a collective break to enjoy the holiday season. Essential support services remain available, with teams coordinating to ensure coverage during this period - Four-week, paid sabbatical after five years with the team - Fantastic in-person or virtual retreats with the team twice a year   HOW TO APPLY We usually receive a large number of applications, and our goal is to follow up with you within two weeks. You’ll hear from us either way. Here’s what you can expect from the rest of our hiring process: 1. A phone screen with our recruiter (30 min) 2. Hiring manager interview (45 min) 3. Take-home assignment 4. Technical interview (60 min) We’ll keep you informed through every step. To get started, complete this application, including a cover letter and answers to the questions on the next page. We read every single application, and your cover letter and responses help put your experience into context. Kit is an equal opportunity employer We value diversity in all of its forms. Research tells us that applicants who are female or non-binary, as well as applicants who are people of color, are less likely to apply for roles they do not feel 100% qualified for. If you think you meet more than 50% of our requirements but fewer than 100% of them, please apply. We’re imperfect communicators, so think of our job postings as the starting point for discussion rather than proof that you shouldn’t apply. Kit does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.