Инфраструктура и безопасность вакансии

- 3+ years of experience in Linux system administration. - Proficiency with Terraform and Ansible.

Компания «Цифровые собрания» ищет хорошего специалиста на вакансию «Системный администратор». Требуемые навыки: #lead, #Linux, #Nginx, #Grafana.

Задачи: — сопровождение ИТ-инфраструктуры компании — поддержка пользователей — настройка и обслуживание компьютерной техники, сетевого оборудования, программного обеспечения — устранение технических неисправностей — обеспечение бесперебойной работы рабочих мест сотрудников Требования: — среднее специальное или высшее техническое образование — опыт работы в технической поддержке от 1 года будет преимуществом — знание ОС Windows и офисного ПО — понимание принципов работы компьютерных сетей и оборудования — навыки диагностики и устранения неисправностей ПК и периферии — опыт работы с Active Directory будет преимуществом — ответственность, коммуникабельность, клиентоориентированность Условия: — официальное трудоустройство согласно ТК РК — график работы: 5/2, с 09:00 до 18:00 — место работы: г. Астана, Кунаева 31 — возможность профессионального развития и обучения — работа в стабильной компании

– Оказание удаленной технической поддержки (посредством телефонных звонков) и мониторинг работы кассовых систем и оборудования в предприятиях; – Оперативное решение технических проблем, взаимодействие с сотрудниками предприятий для устранения неисправностей;

Location: Bengaluru, India Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Technical Support Engineer on the Customer Support team, you’ll play a critical role in shaping how Figma identifies, diagnoses, and resolves complex product issues at scale. As a founding member of our Bangalore team, you’ll help establish quality standards, influence workflows, and build strong partnerships with Engineering and Product. We are looking for a Technical Support Engineer who will drive quality improvements across the support and product lifecycle. This role goes beyond resolving issues—you’ll identify patterns, lead root cause analysis, and partner with Engineering and Product to improve reliability and customer experience at scale. The ideal candidate brings strong technical depth, systems thinking, and the ability to operate effectively in a fast-paced, ambiguous environment. Coverage outside standard business hours is part of this role. Your shift hours will be one of the following: Wednesday to Sunday, 12.30pm - 9.30pm IST Thursday to Monday, 12.30pm - 9.30pm IST Friday to Tuesday, 12.30pm - 9.30pm IST This role will be held from our Bengaluru office. What you’ll do at Figma: Develop deep expertise in Figma’s products, architecture, and customer workflows to diagnose complex technical issues Interact with Figma customers daily via support channels such as chat, email, or video calls, taking ownership over complex problems Own end-to-end resolution of high-impact bugs, partnering closely with Engineering and Product to drive timely and effective fixes, and maintain clear, proactive communication to improve customer satisfaction Contribute to social support efforts by engaging with customers and users on social media and community platforms Adapt to supporting customers across multiple products, including assisting with billing and account management issues as needed. Maintain schedule flexibility, including occasional weekend or holiday coverage, to support customers globally Recommend and implement improvements to debugging workflows, tooling, and support operations Collaborate cross-functionally to create internal documentation, training materials, and scalable knowledge systems Act as the voice of the customer by identifying trends and communicating insights to our Product and Engineering teams to advocate for bug fixes, tooling and process improvements, and feature enhancements We'd love to hear from you if you have: 2+ years of experience in Technical Support, Support Engineering, or QA within a SaaS environment Strong troubleshooting and debugging skills across Mac, Windows, iOS, and Android, including REST APIs, OAuth authentication flows, and third-party integrations Working knowledge of modern web technologies, including JavaScript/TypeScript, HTML, CSS, and React Ability to collaborate with Engineering and Product teams to resolve complex technical issues, with strong analytical, problem-solving, and communication skills Comfortable navigating fast-paced, ambiguous environments, with a focus on end-to-end issue resolution and continuous process improvement While not required, it’s an added plus if you also have: Experience working with design tools like Figma, Adobe Suite, Sketch, Framer At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Bengaluru, India Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As an Enterprise Support Specialist on the Customer Operations & Support team, you’ll have the opportunity to partner closely with the Enterprise Support Manager to define and elevate our Enterprise Support function. As part of the growing team in our Bangalore hub, you’ll also help define how we operate in-region - shaping workflows, influencing tooling, and raising the bar for what great Enterprise support looks like at Figma. This team is responsible for crafting what exceptional support looks like for Figma's most strategic customers. You will be delivering the kind of experiences that build trust throughout the Figma community, from customers to key internal partners, such as Sales, Product, and Engineering. We're looking for a technical support expert experienced in working with B2B Enterprise-level customers with an ability to understand and help with their unique needs. You will diagnose issues, determine solutions, and anticipate customer impact, serving as a customer advocate while working cross functionally to deliver an exceptional experience. The work you do will span over technical product, account administration and billing. This role requires coverage during non-standard business hours to support global customers. Coverage outside standard business hours is part of this role. Your shift days and hours will be one of the following: Wednesday to Sunday, 3.30pm IST - 12.30am IST Wednesday to Sunday, 11.30pm IST - 8.30am IST Thursday to Monday, 5.00am IST - 2.00pm IST Friday to Tuesday, 8.00am IST - 5.00pm IST This role will be held from our Bangalore office on a hybrid basis. What you'll do at Figma: Develop expertise of Figma's products and the journey of our customers, from Product Designers to Account Administrators, to accurately diagnose sophisticated inquiries Interact with Figma customers daily via email, taking ownership over cases from start to resolution Partner closely with Sales teams to guide large scale organizations through complex workspace configurations, acting quickly to address technical issues and ensuring successful account setup Operate as the voice of the customer, capturing both product and process gaps in the experience and presenting data-backed cases for new feature development and process automation Act as designated point of contact for high-risk escalations and issues, proactively engaging the appropriate partners, and owning communication through to solution Identify trends and communicate insights to our Product and Engineering teams to advocate for bug fixes, process improvements, and feature enhancements Engage in pilot programs and experimentation to identify efficient approaches for delivering fast and personalized interactions to meet performance expectations and customer commitments Recommend foundational tooling and processes in partnership with our Product Support Operations teams to ensure we are set up to scale We’d love to hear from you if you have: 2+ years of experience in a technical SaaS Support environment, ideally supporting Enterprise customers Proficiency in troubleshooting SAML/SSO and SCIM configurations for large-scale organizations Familiarity with system administration for large end-user communities or guiding customers through complex implementations Ability to assess the business impact of technical issues to drive cross-functional alignment, prioritization, and timely resolution While it’s not required, it’s an added plus if you also have: Skilled in using tools such as Adobe XD, Sketch, and/or Framer and a passion for UX/UI development Familiarity and willingness to learn AI concepts (e.g., prompt refinement, natural language tools, generative AI, machine learning basics) At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: San Jose, California, United States Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Team Cloud Infrastructure Engineering is a critical engineering discipline and a job function in the company. Its charter is to build tools and infrastructure that promote early detection of production failures, leading to a stellar customer experience. Our work is to drive safety, health and uptime of our platform, and the ability to remedy unforeseen problems. By removing some of the complex burdens on how to scale and maintain uptime in distributed systems, Cloud Infrastructure Engineer allows development teams to focus on feature development instead of the nuances of achieving and maintaining service level commitments. About the Opportunity: We’re looking for a creative and driven individual that can spearhead our effort to push “outside the box” infrastructure implementations, that will have a tremendous impact on our platform’s stability and scalability. What You’ll Be Doing: Responsible for the maintenance and configuration of AWS products and services Responsible for the research, architecture and project implementation solutions based on AWS products Responsible for the daily maintenance of each AWS cloud environment Support the deployment, maintenance and scaling of big data and machine learning platforms (e.g., Databricks, AWS SageMaker, Aliyun DSW) to enable data processing and model training workflows Own the Databricks platform on AWS end to end: workspace provisioning, account/workspace configuration, cluster policies, instance pools, and SQL warehouses, managed as code via the Databricks Terraform provider Monitor and optimize Databricks cost and performance, including cluster sizing and autoscaling, Photon/serverless adoption, DBU usage tracking via system tables, and job reliability tuning Automate the provisioning, scaling, and configuration of infrastructure resources using tools like Terraform and CI/CD pipelines Assist the team in troubleshooting and resolving production database issues during incidents Monitor company services and handle alerts in a timely manner to ensure service stability and uptime Collaborate with development teams to ensure seamless integration and deployment of new features Design, build and maintain internal platforms and tooling to improve operational efficiency, and support unified multi-cloud management across AWS, Alibaba Cloud, and other providers What We Look For In You: Bachelors degree or above, major in Computer Science or relevant domains, with over 6 years of experience in DevOps, SRE, DBA or related positions Proficient in AWS distributed management, large-scale clustering, fault tolerance, backup, load balancing and other technologies Have a deep understanding of high availability architecture, capacity planning, and rich experience in handling complex problems Have solid Linux platform operation and maintenance and debugging capabilities, and be proficient in troubleshooting, configuration tuning, and performance analysis Familiar with Kubernetes (k8s) for container orchestration and management Familiar with the functional features of AWS products and core products, and have rich practical experience in deployment and tuning of EC2, EKS, VPC, or big data products Experience with microservices architecture, including deployment, scaling, and maintenance Experience in monitoring, O&M and management of AWS large-scale servers and containers Experience in relational databases (e.g., MySQL, PostgreSQL) and NoSQL or big-data storage systems (e.g., Redis, MongoDB, HBase) is a plus Hands-on experience with big data / machine learning platforms such as Databricks, AWS SageMaker, or Aliyun DSW, including supporting data pipelines, notebook environments, and model training/deployment workflows Familiar with the deployment, configuration and maintenance of Nginx, kong and other software Proficient in using Python/Go/shell for development Strong engineering skills, proficient in at least one infrastructure sub-area, public cloud networking, SRE, DevOps or cloud-native Experience with internal developer platforms and proficiency in AI-assisted development tools (e.g., Claude Code, Codex) to improve engineering efficiency Working knowledge of Terraform or similar IaC tools is a plus Excellent business analysis ability, system architecture ability, and problem-solving ability. and strong self-drive Nice to Have: Bilingual in English and Mandarin Familiar with the operation and maintenance management of Alibaba Cloud, Google Cloud, Microsoft Cloud and other cloud providers. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. The salary range for this position is $214,666 to $321,999. The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site. #LI-SK1 #LI-HYBRID Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Bitdeer is looking for a Developer Experience Engineer to build and own Terraform, CLI, and SDK products for GPU-cloud infrastructure.

Anthropic is looking for an Applied AI Architect Security Specialist to advise enterprise customers and deploy Claude-powered security workloads.

Оказывать техническую поддержку сотрудникам компании (очно и удалённо).

 Приём обращений пользователей (через сервис-деск).  Решение типовых заявок и инцидентов в рамках установленного регламента.

Администрирование и настройка Linux-систем (RHEL, CentOS, Debian, Ubuntu); Подготовка инфраструктуры под задачи различных проектов;

Location: Brazil About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus.

Location: Mexico About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus.

Location: United States About the Role Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors. Industry Insight Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust. About Alvys Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar. Our Principles Engineering Principles Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding. Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results. Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow. Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load. Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth. Engineering Culture Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity. Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last. Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one. Pragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones. People Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected. Responsibilities Cloud security architecture Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access. Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them. Build secure defaults into our infrastructure modules so new resources start out compliant. Vulnerability management and pipeline security Help run our vulnerability management program, driving remediation within defined SLAs. Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing. Tune and improve the automation we already use to process security findings. Penetration testing Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting. Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs. Infrastructure for security, IT, and AI tooling Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one. Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity. Working with others Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation, and produce evidence for our SOC 2 program. Tech Stack Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID) Infrastructure as code: Terraform CI/CD: GitHub Actions and Azure DevOps pipelines Containers: Docker, Kubernetes, Azure Container Registry Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana Security: Aikido, Cloudflare AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot Application code: .NET/C#, TypeScript, Angular, React Minimum Qualifications Fluent in English, spoken and written. 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering. Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management. Production experience with infrastructure as code, preferably Terraform. Experience building and maintaining CI/CD pipelines. Working knowledge of containers and Kubernetes. Scripting skills in Python, PowerShell, or Bash. Understanding of common security risks in cloud and web applications, and how to fix them. Ability to explain technical risk clearly to engineers and non-engineers. Preferred Qualifications Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities. Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing. Experience coordinating penetration tests or working with external security firms. Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus). Familiarity with SOC 2, ISO 27001, or CIS Benchmarks. Interest in AI tooling and how to deploy and monitor it safely. Security certifications such as AZ-500, Security+, or similar are a plus. Background in logistics or transportation is a bonus. Equal Employment Opportunity Alvys is an equal opportunity employer and as such, we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other characteristic protected by applicable laws. We are dedicated to growing a diverse team of highly talented people. We’re dedicated to building a workplace where we give each other the strategies, support, and space we each need to thrive—believing in and bringing out the best of everyone. If you require any accommodations during the recruitment process, whether it be alternate forms of material, accessible meeting rooms, etc., please let us know and we will work with you to meet your needs. For information about Alvys's privacy practices, see our Privacy Policy .

• Изучение построения ИТ-инфраструктуры и участие в задачах по ее улучшению; • Помощь команде продаж в ответах на базовые вопросы заказчиков;

Design and support air-gapped deployment environments for LLM-based systems. Deploy and optimize LLM workloads on GPU infrastructure.

- Выстраивать и поддерживать процесс инвентаризации инфраструктурных и endpoint-активов. - Реализовывать и развивать контроль сетевой безопасности: access control, сегментация, мониторинг.