Инфраструктура и безопасность вакансии

• Resolve customer technical issues end-to-end (Helpdesk + Slack) within SLA. • Conduct root cause analysis with Grafana, Datadog (logs, metrics, traces).

- Понимание работы интернета. - Навыки настройки почты, FTP, SSH.

Location: New York Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are looking for an IT Support / Operations Engineer to join Baseten as we continue to scale our IT team. In this role, you will play a critical part in bringing our technical support entirely in-house to provide a seamless, high-touch experience for all Baseten employees. As we continue to scale, you will be the primary point of contact for day-to-day technical issues, allowing you to have a direct impact on our team's productivity and overall office environment. This position is ideal for a hands-on problem solver who enjoys a mix of hardware and software troubleshooting, user lifecycle management, and maintaining the physical IT infrastructure of a modern office. While you will focus heavily on elevating our internal support standards, you will also assist with systems administration and workflow automation as our company evolves. This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in-person to ensure our physical office and AV systems remain high-performing and reliable.   RESPONSIBILITIES - Serve as the escalation point for day-to-day technical support, diagnosing and resolving hardware and software issues across our Mac and Windows fleet - Manage user lifecycle administration including provisioning, deprovisioning, and access management across all systems and services - Own the IT onboarding experience for new employees — from laptop setup and account configuration to a smooth first-day experience - Maintain and continuously improve office IT infrastructure to ensure a reliable, high-performing environment for all employees - Build and maintain a knowledge base of self-serve resources to reduce ticket volume and empower users - Manage IT asset procurement, inventory tracking, and vendor relationships - Support new office buildouts and contribute to broader workplace IT planning as we scale - Identify opportunities to automate workflows and eliminate inefficiencies across IT operations - Adapt to the evolving needs of a fast-growing company, taking on new challenges as they arise - Systems administration, including managing admin-level access, configuring user permissions, and performing routine maintenance across cloud-based services.   REQUIREMENTS - Strong working knowledge of Google Workspace, MDM platforms (e.g. Kandji), IdM/SSO solutions (e.g. Okta), and video conferencing tools - Proven experience administering macOS at scale, with solid working knowledge of Windows environments - Hands-on experience with automation tools and a track record of streamlining IT processes and workflows - Excellent communication skills with a genuine passion for delivering great support experiences - Strong organizational skills with the ability to manage multiple priorities in a fast-paced, ambiguous environment BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Развертывать стенды с нуля, включая настройку инфраструктуры, сетей, хранилищ и других необходимых ресурсов; Настраивать и конфигурировать кластера Kubernetes;

Создавать и внедрять CI/CD-проекты для систем в Банке. Создавать скрипты для автоматизации процессов разработки и сопровождения.

∙ Обеспечение бесперебойной работы федеральных информационных систем; ∙ Оперативное решение возникающих проблем;

Заниматься автоматизацией CI/CD на тестовых и промышленных системах (Jenkins, Ansible). Обеспечивать непрерывную работоспособность проектов.

Разработка и поддержка CI/CD пайплайнов. Автоматизация инфраструктуры (IaC).

Поддерживать инфраструктуру на bare metal и виртуальных машинах. Разворачивать и обслуживать кластеры Kubernetes.

Задачи: — Владеть портфелем из 10-15 стратегических аккаунтов. — Быть основным техническим контактом для API-партнеров, информировать заинтересованные стороны и доводить вопросы до решения. — Поддерживать технические оценки. — Участвовать в продажах, демонстрировать возможности API, понимать требования партнера и объяснять, как будет работать интеграция. — Руководить внедрением партнеров: превращать требования в четкий план интеграции, сопровождать разработчиков на этапе настройки и тестирования, отслеживать прогресс до запуска. — Самостоятельно устранять неполадки: исследовать запросы, ответы, логи, проблемы с аутентификацией и поведение интеграции до эскалации в инженерный отдел. — Тесно сотрудничать с инженерной командой, предоставляя четкие шаги для воспроизведения, релевантные доказательства и информацию о влиянии на клиента при необходимости глубокого расследования. — Улучшать опыт разработчиков: создавать и поддерживать руководства по API, коллекции Postman, примеры кода, FAQ и инструкции по онбордингу. — Выявлять повторяющиеся проблемы, делиться отзывами партнеров и шаблонами интеграций для улучшения продукта. — Вести усилия по расширению: кросс-продажи новых функций и продуктов как естественное продолжение отношений, а не отдельное действие. Требования: — Опыт 4+ лет в технической роли с взаимодействием с клиентами или эквивалентный опыт в компаниях с API-ориентированным или девтулз-направлением. — Практическое понимание REST API, HTTP, JSON, аутентификации, вебхуков, пагинации и ограничений по скорости. — Умение работать с Postman или curl, читать логи, писать или адаптировать небольшие примеры кода на JavaScript или Python. — Опыт продвижения внедрения внутри сложных организаций, умение работать с разными уровнями клиентов. — Сильная исполнительность и умение доводить вопросы до конца. — Опыт работы в стартапе с численностью менее 50 человек. — Свободное владение английским языком, умение объяснять технические вопросы как разработчикам, так и нетехническим заинтересованным лицам. — Ответственный подход и менталитет владельца. Условия: — Удаленная работа из любой точки мира. — Стандартные рабочие часы: понедельник–пятница, 8:00–17:00 по восточному времени США с перерывом на обед. — Возможны редкие звонки вне стандартных часов для партнеров из Азиатско-Тихоокеанского региона и ключевых этапов внедрения. — Полная занятость.

Location: New York, United States Who We Are At OKX, we believe the future will be reshaped by crypto and blockchain technology. We operate a leading global crypto platform and build products and services designed to expand access to the digital-asset ecosystem. Across our global organization, we value ownership, sound judgment, collaboration, innovation, and the ability to operate effectively in a fast-moving and continuously evolving environment. Recruiting should insert the current approved OKX corporate “Who We Are” language when the position is posted. About the Team The Fraud Investigations Team (FIT) is a First Line of Defense function within OKX’s Risk organization responsible for identifying, assessing, investigating, and helping manage significant internal and external fraud risks affecting the company, its customers, personnel, and operations. FIT conducts and supports complex investigations involving digital assets, internal and external fraud, employee misconduct, insider threats, unauthorized access or misuse of information, vendor and third-party misconduct, account compromise, social engineering, collusion, conflicts of interest, and other significant fraud-related matters. The team works closely with Legal, HR, Information Security,Engineering, Physical Security, Compliance, Finance, Operations, and other functions across OKX. About the Opportunity We are looking for an experienced Senior Analyst, Blockchain Investigations & Fraud Intelligence to join FIT. This is first and foremost a blockchain investigations role requiring significant hands-on expertise tracing digital assets across complex blockchain ecosystems. The successful candidate must be capable of independently conducting sophisticated on-chain investigations, developing and testing attribution hypotheses, identifying relationships among wallets and entities, following assets through multiple chains and protocols, and translating highly technical blockchain activity into clear investigative findings. Blockchain analysis is a specialized investigative discipline. Accordingly, we are seeking someone who understands not only how to operate commercial tracing platforms, but also the underlying blockchain architecture, transactional mechanics, attribution methodologies, clustering techniques, tracing limitations, and evidentiary considerations necessary to reach reliable conclusions. The role extends beyond on-chain analysis. The Senior Analyst will combine blockchain intelligence with enterprise data, system logs, transactional records, open-source information, and other evidence to support complex fraud and insider-risk investigations. The position will also provide analytical support to the Global Physical Security Team (PST) on selected protective-intelligence and threat-assessment matters. The Senior Analyst will directly manage one Analyst and will be expected to serve as a subject-matter resource for blockchain investigations and analytical methodology across FIT. What You’ll Be Doing Blockchain Investigations & Digital-Asset Intelligence Lead and conduct complex blockchain investigations and transaction tracing across multiple wallets, counterparties, entities, blockchains, tokens, protocols, and digital-asset ecosystems. Trace the origin, movement, conversion, layering, consolidation, and ultimate disposition of digital assets , including activity spanning multiple intermediaries and blockchain environments. Conduct investigations using tools such as Chainalysis Reactor , TRM Labs, Elliptic, or comparable blockchain intelligence platforms , while understanding the methodologies and limitations underlying platform-generated attribution. Analyze activity involving centralized exchanges, self-hosted wallets, decentralized exchanges, cross-chain bridges, mixers, privacy-enhancing technologies, DeFi protocols, smart contracts, stablecoins, NFTs, OTC activity, gambling platforms, and other relevant ecosystems . Trace assets across multiple chains and cross-chain transactions , identifying continuity of funds where technically supportable and clearly documenting assumptions or limitations where definitive attribution is not possible. Analyze transaction graphs, address relationships, behavioral patterns, clusters, counterparties, timing, amounts, transaction sequencing, and other relevant blockchain indicators. Understand and appropriately apply wallet-clustering and attribution methodologies , including the limitations and potential for false attribution associated with particular heuristics. Independently evaluate blockchain intelligence rather than relying solely on automated labels, risk scores, or vendor-generated attribution. Corroborate on-chain findings, where appropriate, with internal account records, KYC / KYB information, transaction data, access information, open-source intelligence, legal-process returns, or other available evidence . Identify relationships among blockchain addresses, OKX accounts, external counterparties, individuals, organizations, vendors, affiliates, and other relevant entities. Reconstruct complex transaction flows and create clear fund-flow diagrams, transaction maps, timelines, and visualizations that allow investigators and nontechnical stakeholders to understand the movement of assets. Analyze blockchain activity associated with suspected fraud , theft, account takeover, social engineering, insider activity, collusion, payment diversion, asset misappropriation, or other misconduct . Identify new wallets, counterparties, entities, or transactional patterns that may generate additional investigative leads. Clearly document the methodology, assumptions, confidence level, and limitations associated with blockchain findings. Distinguish between confirmed attribution , vendor attribution, analytical inference, behavioral similarity, and an unverified investigative hypothesis . Avoid presenting blockchain proximity, exposure, clustering, or a commercial risk score alone as proof of ownership, control, intent, or misconduct. Maintain current knowledge of emerging blockchain technologies, protocols, tracing methodologies, obfuscation techniques, fraud typologies, and developments affecting blockchain attribution or investigations . Fraud Investigations & Investigative Intelligence Conduct and support investigations involving internal and external fraud , employee misconduct, insider threats, vendor and third-party misconduct, collusion, conflicts of interest, asset misappropriation, unauthorized access, credential misuse, and other significant fraud risks . Combine blockchain findings with off-chain evidence to develop a comprehensive investigative picture rather than treating blockchain activity in isolation . Develop investigative hypotheses and objectively test those hypotheses against available evidence, including information that supports, contradicts, or fails to establish the hypothesis. Conduct timeline reconstruction, link analysis, relationship mapping, pattern analysis, clustering, and comparative analysis across individuals, accounts, wallets, devices, systems, transactions, and entities. Support investigations involving account takeover, impersonation, social engineering, business-email compromise, payment diversion, affiliate misconduct, and trusted-party abuse , particularly where a digital-asset, employee, vendor, or enterprise nexus exists. Analyze vendor, affiliate, partner, and other third-party activity for indicators of billing irregularities, undisclosed relationships, conflicts of interest, unusual payments, control circumvention, or other potential misconduct. Support investigative interviews by developing transaction timelines, identifying inconsistencies or information gaps, organizing evidence, and identifying appropriate areas for follow-up. Enterprise Data & Insider-Risk Analytics Analyze appropriately authorized information including system and access logs, authentication records, audit trails, customer-account activity, KYC / KYB information, transaction records, payment information, case-management records, vendor information, and relevant security telemetry . Correlate blockchain activity with enterprise data to identify possible connections among wallets, accounts, employees, customers, vendors, devices, transactions, and other relevant entities . Support investigations involving suspected unauthorized access, information misuse or exfiltration, credential compromise, control circumvention, unauthorized disclosure, or abuse of privileged access. Identify anomalous behavior or access patterns that may warrant additional investigation. Develop repeatable analytical methodologies capable of processing and correlating information from disparate systems. Use appropriate scripting, database querying, data visualization, and analytical technologies to efficiently analyze large or complex datasets. Investigative Reporting & Evidence Prepare clear, concise, and well-supported blockchain investigation reports, investigative memoranda, executive summaries, transaction-flow diagrams, link charts, timelines, and other analytical products . Explain complex blockchain concepts and transaction activity in plain language suitable for investigators, senior management, Legal, regulators, or law enforcement , as appropriate. Clearly distinguish among allegations, investigative leads, known facts, third-party attribution , analytical judgments, assumptions, information gaps, and substantiated conclusions . Ensure analytical conclusions are proportionate to the evidence and do not imply greater certainty than the underlying blockchain or other data supports. Maintain sufficient documentation to allow significant blockchain findings to be reviewed, reproduced, and understood by another qualified analyst . Preserve and handle investigative records in accordance with applicable evidence-preservation, chain-of-custody, confidentiality, privacy, access-control, and need-to-know requirements . Support appropriately authorized law-enforcement, regulatory, litigation, or legal matters in coordination with the appropriate company functions. Protective Intelligence & Physical Security Support Provide analytical support to PST on selected matters involving threats or concerning activity directed toward employees, executives, offices, events, or other company interests. Conduct authorized open-source, link, timeline, blockchain, financial, or other analytical research where relevant to understanding the identity, relationships, capabilities, or activity associated with a potential threat. Assist in evaluating available information relating to credibility, corroboration, intent, capability, access or opportunity, targeting, escalation, timing, and other relevant indicators . Prepare objective analytical products identifying known facts, analytical judgments, material information gaps, uncertainties, and appropriate confidence levels. Support PST’s assessment while preserving PST’s responsibility for protective-security decisions and operational response . Leadership & Development Directly manage and develop one Junior Analyst, including work allocation, coaching, technical development, quality assurance, and review of analytical work product . Serve as a FIT subject-matter resource for blockchain investigations and on-chain analytical methodology . Review blockchain analysis for technical accuracy, appropriate methodology, corroboration, reasonable attribution, and evidentiary support. Train and mentor junior personnel in transaction tracing, blockchain intelligence platforms, analytical reasoning, documentation, and investigative methodology. Help establish consistent standards for blockchain investigations, attribution , documentation, quality assurance, and reporting . Participate in time-sensitive investigations affecting a global organization, including occasional work outside normal business hours when required. What We Look For In You 7+ years of relevant investigative or analytical experience , with meaningful professional experience specifically conducting cryptocurrency or blockchain investigations . Demonstrated hands-on expertise independently conducting complex blockchain tracing investigations , rather than solely reviewing blockchain alerts or commercial risk scores. Advanced proficiency with one or more blockchain intelligence platforms such as Chainalysis Reactor , TRM Labs, Elliptic, or comparable technology . Strong understanding of how blockchain intelligence platforms derive attribution, clustering, exposure, and risk information—and the limitations associated with those methodologies . Demonstrated understanding of blockchain fundamentals, including wallets and addresses, transactions, UTXO and account-based models, tokens, smart contracts, block explorers, transaction fees, confirmations, and blockchain-specific transactional structures . Strong understanding of digital-asset ecosystems including centralized exchanges, self-hosted wallets, DeFi , DEXs, stablecoins, cross-chain bridges, mixers, privacy-enhancing mechanisms, and other relevant technologies . Demonstrated ability to trace assets across multiple chains, protocols, and intermediaries and recognize when technical limitations prevent definitive continuity or attribution. Experience conducting transaction-graph analysis, wallet attribution , clustering, counterparty analysis, transaction-flow reconstruction, and investigative link analysis . Ability to critically assess blockchain attribution and distinguish among technical facts, commercial vendor intelligence, analytical inference, and unsupported assumptions . Experience integrating blockchain intelligence with off-chain evidence and enterprise information to develop investigative conclusions. Strong knowledge of fraud-investigation principles including corroboration, source evaluation, evidence preservation, timeline development, hypothesis testing, and documentation. Experience analyzing large or complex datasets and familiarity with tools such as SQL , advanced Excel, Python, Splunk, or comparable data-analysis technologies . Ability to clearly explain technically complex blockchain findings to audiences that may have little or no blockchain expertise. Strong investigative writing skills and demonstrated ability to produce accurate, concise, and defensible analytical products. Sound judgment and ability to work effectively where evidence is incomplete, conflicting, or evolving. Demonstrated discretion when handling sensitive employee, customer, investigative, security, or company information. Demonstrated experience mentoring, supervising, or reviewing the work of junior analysts or investigators. Nice to Haves Experience conducting blockchain investigations within a cryptocurrency exchange, blockchain analytics company, law-enforcement agency, regulatory organization, financial institution, intelligence function, or investigative consulting environment . Experience investigating digital-asset matters involving fraud proceeds, theft, account compromise, insider activity, social engineering, asset tracing, or complex cross-chain movement . Experience supporting asset recovery, law-enforcement referrals, subpoenas/legal process, civil litigation, regulatory inquiries, or other matters requiring defensible blockchain analysis . Experience investigating insider threats, employee misconduct, unauthorized access, data exfiltration, credential compromise, vendor fraud, conflicts of interest, or trusted-party abuse. Experience with OSINT, digital forensics, enterprise logs, security telemetry, or identity and access-management information . Experience creating custom blockchain analytics through APIs, SQL , Python, blockchain explorers, node data, or other raw-data sources , rather than relying exclusively on commercial graphical interfaces. Relevant blockchain-specific training or certifications, including certifications associated with Chainalysis , TRM Labs, or comparable blockchain-analysis platforms . Professional certifications such as CFE, CFCS, CAMS, GIAC, or comparable investigative, fraud , financial-crime, cybersecurity, or intelligence credentials . What Success Looks Like Success in this role requires significantly more than knowing how to enter an address into a blockchain analytics platform. The successful candidate should be able to receive a complex transaction, wallet, allegation, or investigative question and independently determine how to trace the activity, which chains and protocols are involved, what the available data establishes, what additional information is needed, what attribution can reasonably be made, and where the technical or evidentiary limitations prevent a definitive conclusion . The individual should be able to move seamlessly between on-chain and off-chain evidence , recognizing that a blockchain transaction may establish movement of assets without necessarily establishing the identity, knowledge, intent, or conduct of the person behind a wallet. They should also be capable of converting a highly technical blockchain investigation into a concise and defensible explanation that an investigator, attorney, executive, regulator, or law-enforcement partner can understand and act upon. At the same time, this person must be sufficiently versatile to apply the same investigative discipline to internal fraud , insider risk, enterprise data, third-party misconduct, and protective-intelligence matters when required. The hierarchy is much clearer this way: blockchain investigations are the specialized core competency; fraud /investigative intelligence is the broader mission; enterprise analytics and PST support are complementary capabilities. That should materially improve the candidate pool versus a title that makes blockchain expertise appear interchangeable with general data analytics. OKX Statement: OKX is committed to equal employment opportunities regardless of race, color, genetic information, creed, religion, sex, sexual orientation, gender identity, lawful alien status, national origin, age, marital status, and non-job related physical or mental disability, or protected veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. The salary range for this position is $143,000 - $214,000 The salary offered depends on a variety of factors, including job-related knowledge, skills, experience, and market location. In addition to the salary, a performance bonus and long-term incentives may be provided as part of the compensation package, as well as a full range of medical, financial, and/or other benefits, dependent on the position offered. Applicants should apply via OKX internal or external careers site. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

• Коммерческий опыт в DevOps или SRE от 4 лет. • Реальный опыт проектирования и построения инфраструктуры с нуля.

• Практический опыт работы с Docker/docker-compose; • Опыт с Qdrant, REST/gRPC и Qdrant Cloud;

• Координировать и поддерживать команды по вопросам информационной безопасности в кластере; • Проектировать безопасную архитектуру – разрабатывать системы защиты для новых и модернизируемых продуктов (модульные, микросервисные, мобильные приложения и др.);

Develop and maintain Terraform/OpenTofu modules for vSphere VM provisioning, placement/resource-pool configuration, and cloud-init/cloudbase-init integration, following designs defined by the VMware Architect. Create and run Ansible playbooks for post-provisioning configuration handoff on VMware-provisioned VMs.

Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, certificate binding), following designs defined by the Network Architect. 3+ years of hands-on experience in network engineering with a focus on automation.

Требования: — сильный практический опыт управления корпоративными Mac-устройствами — опыт работы с macOS Endpoint Management и Hardening — практический опыт работы с Okta — опыт работы с 1Password — опыт работы с YubiKey и аппаратными ключами безопасности — сильный опыт в области безопасности конечных точек Условия: — краткосрочный проект: несколько недель

Задачи: — Взять на себя ключевую часть сетевой и VPN-инфраструктуры проекта — Следить за изменениями в блокировках и сетевых ограничениях — Понимать современные методы фильтрации трафика — Знать актуальные VPN-технологии и постоянно тестировать новые инфраструктурные решения — Строить масштабируемую и отказоустойчивую инфраструктуру — Проектировать отказоустойчивую инфраструктуру, способную переживать сбои и изменения сетевых ограничений без постоянного ручного вмешательства — Быстро исследовать изменения в сетях, ставить эксперименты, находить причины проблем и внедрять решения Требования: — Senior-уровень в сетях: TCP/IP, UDP, DNS, TLS/HTTPS, маршрутизация, NAT — Серьёзный практический опыт с VPN, туннелированием и Xray — Опыт работы именно с крупными VPN-проектами — Глубокое понимание DPI, фильтрации трафика, блокировок и причин деградации соединений — Сильный Linux и сетевая диагностика — Опыт с dedicated-серверами, VPS/VDS, CDN, дата-центрами и хостинг-провайдерами — Практический опыт колокации собственного оборудования (плюсом) — Постоянная погружённость в VPN-индустрию и понимание того, что в ней происходит прямо сейчас — Хорошо ориентироваться в рынке хостингов и дата-центров — Понимать особенности разных провайдеров Условия: — Full-time — Только основная работа — без параллельной работы и учёбы