Инфраструктура и безопасность вакансии

Требования: - Знания Linux и основные команды - Взаимодействие с сетью: HTTP/HTTPS, DNS, TCP/IP - Понимание Docker и Kubernetes - Знакомство с CI/CD, Ansible и SQL Обязанности: - Внедрение и эксплуатация модулей сервисной шины - Анализ заявок 3й линии поддержки - Развертывание и обновление сред для разработки - Разработка пайплайнов доставки и автоматизация операций Условия: - Оформление по ТК РФ - ДМС, корпоративная мобильная связь - Гибкий график, обучение новым навыкам - Наставничество от коллег, работа с реальными задачами

Задачи: — Проектировать и развивать внутреннее AI-ядро: агенты, skills, tool use, routing, orchestration. — Строить и улучшать RAG-сценарии: retrieval, chunking, embeddings, reranking, доступ к знаниям. — Делать reusable-компоненты и шаблоны для аналитиков: skills, коннекторы, пайплайны, reference flows. — Интегрировать AI-платформу с внутренними системами, базами данных, API и корпоративными источниками знаний. — Настраивать observability, tracing, evaluation и контроль качества AI-пайплайнов. — Оптимизировать качество, latency, стоимость и устойчивость пайплайнов. Требования: — Практический опыт построения production RAG / agent / workflow-систем. — Опыт создания внутренних инструментов или платформ, которыми реально пользовались аналитики или бизнес-команды. — Умение работать на стыке engineering и enablement: собрать решение и сделать его понятным для пользователей. — Опыт интеграции AI-пайплайнов с корпоративными источниками данных, API и внутренними системами. — Умение разбирать сложные пользовательские сценарии и упаковывать их в reusable-механики платформы. Технический стек: • Python, SQL, FastAPI, API integrations, async, service-oriented development. • LangGraph, LlamaIndex, Haystack, Semantic Kernel. • Qdrant, pgvector, Weaviate, Milvus, OpenSearch, Elasticsearch. • Embeddings, hybrid search, metadata filtering, reranking. • Airflow, Prefect, Dagster, Temporal. • Langfuse, Phoenix, OpenTelemetry (или собственные подходы к tracing / observability / eval). • Docker, Linux, Kubernetes, CI/CD. Условия: — Ставка: обсуждается отдельно. — Готовность к редким командировкам в Ереван. — Работа в топовом финтех-направлении над уникальным AI-продуктом.

Location: Kyiv Workplace: onsite Ajax Systems, an international tech company and the largest manufacturer of security systems in Europe. We are looking for a DevOps Team Lead to join our Platform Team and help us scale, secure, and improve our cloud infrastructure. This role combines hands-on technical ownership with team leadership: you will guide DevOps engineers, define platform priorities, improve reliability, and collaborate closely with product and engineering teams. The System Division develops the Ajax software ecosystem — including OS Malevich, the Video Management System, cloud infrastructure, and client applications. The team ensures the stable operation of all system components as a unified digital platform. Requirements: 5+ years of experience in DevOps, Platform Engineering, SRE, or Cloud Engineering, including 2+ years in a lead or senior ownership role. Strong hands-on experience with Kubernetes, preferably AWS EKS, including cluster operations, networking, autoscaling, workload reliability, and security best practices.Solid AWS experience: VPC, IAM, EC2, RDS, ElastiCache, Route 53, Lambda, Load Balancers, CloudFront/S3 etc. Experience with Infrastructure as Code and configuration management tools, especially Terraform/Terragrunt. Experience with GitOps-based delivery using Argo CD or Flux, and Helm/Kustomize for Kubernetes application management. Strong Linux and TCP/IP networking knowledge, including troubleshooting production systems. Experience with secrets management, access control, and credential rotation practices. Strong observability background: metrics, logs, alerts, SLOs, incident investigation, and tools such as Datadog, Grafana, VictoriaMetrics, ELK, or Opsgenie. Ability to lead technical discussions, explain trade-offs, set priorities, and drive decisions across engineering teams.Strong communication, ownership, task management, and mentoring skills. Desirable: Experience with advanced Kubernetes tooling: Karpenter, KEDA, Envoy, Istio/Linkerd or similar. Experience with streaming platforms such as NATS or Kafka. Operational experience with databases such as MongoDB, MySQL, PostgreSQL, or managed cloud database services. Experience with compliance frameworks such as SOC 2.Background in FinOps, cloud cost optimization, and infrastructure efficiency improvements. Experience with disaster recovery planning, backup strategies, incident response, or production fire drills. Responsibilities: Lead, mentor, and grow the DevOps/Platform team: set technical priorities, support hiring, provide feedback, and foster a culture of ownership and engineering excellence. Own and evolve the Kubernetes platform: cluster architecture, deployment standards, autoscaling, reliability, security practices, and developer experience. Improve CI/CD and GitOps workflows to make deployments safer, more repeatable, and easier for engineering teams. Collaborate with engineering, product, security, and operations teams to align infrastructure improvements with business and product needs. Identify and remove bottlenecks in the software delivery lifecycle, platform operations, and production support processes. Strengthen platform security: access management, secrets management, network controls, compliance requirements, and secure-by-default practices. Build and improve proactive observability: monitoring, alerting, dashboards, incident response processes, and post-incident improvements. Drive cloud cost optimization initiatives and provide practical recommendations for more efficient infrastructure usage. Participate in production support and on-call processes for critical incidents, while continuously improving reliability and reducing operational toil. We offer: The opportunity to suggest and implement your own ideas that directly influence the product and its mass production; A place in a fast-growing company with a motivated and professional team; Competitive salary; Medical insurance; Corporate English classes; The opportunity to participate in Ajax’s internal beta-testing program for security systems; Discounts from partner companies; Discounts on Ajax products. Ajax Systems is a Ukrainian success story that has grown into a global product. Ajax devices are trusted by more than 4.5 million end users and 330,000 PRO users in over 180 countries. The company provides comprehensive solutions to protect residential and commercial properties of all sizes. Today, Ajax portfolio includes 280 devices for intrusion protection, video surveillance, fire safety, and comfort and automation.

Задачи: - Поддержка мерчантов при интеграции с платежными решениями Noda - Исследование сложных технических и платежных проблем с использованием логов, инструментов мониторинга и внутренних систем - Диагностика инцидентов, выявление коренных причин и координация решений с внутренними командами - Обеспечение стабильной работы платежных потоков и интеграций - Тесное сотрудничество с командами Payments, Automation, SRE, Account Management и Product - Улучшение и поддержка технической документации, руководств по интеграции и внутренней базы знаний - Участие в тестировании интеграций и процессах контроля качества - Наставничество младших сотрудников и повышение стандартов поддержки в команде Требования: - Опыт работы 4+ года в технической поддержке, поддержке интеграций или платежной поддержке - Опыт работы с FinTech, платежными системами, PSP или продуктами открытого банкинга - Глубокое понимание HTTP, API, клиент-серверной архитектуры и платежных потоков - Практический опыт работы с логами и инструментами мониторинга (Kibana или аналогичные) - Понимание процессов управления инцидентами, принципов SLA/SLO и поддержки в продуктивной среде - Опыт работы с базами данных SQL/NoSQL - Сильные аналитические и навыки устранения неполадок - Отличные коммуникативные навыки и умение строить доверительные отношения с мерчантами и внутренними заинтересованными сторонами - Опыт наставничества или поддержки младших сотрудников - Свободное владение русским и английским языками на уровне B2 или выше Условия: - Удалённая работа на полный рабочий день - 28 календарных дней отпуска в год - 7 дней wellness в год - Бонусы до $5000 за рекомендацию успешных кандидатов - 50% оплата профессионального обучения, международных конференций и встреч - Корпоративная скидка на уроки английского - Медицинские льготы с компенсацией до $1000 брутто в год на страхование здоровья или оплату врачей - Организация рабочего места с предоставлением необходимого оборудования - Внутренняя геймифицированная система благодарностей для бонусов и тимбилдинга

Location: United States Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: United Kingdom; Brazil; United Arab Emirates; Ireland; Peru; Sweden; Colombia; Argentina; Romania; Cyprus; Switzerland; Portugal; Lithuania; South Africa; Czech Republic; Canada; Hungary; Mexico; Chile; Poland; Spain; Bulgaria Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. We are seeking a skilled & hands-on Senior Security Architect for Kraken Security Labs. Kraken Security Labs provides boutique-style, deeply technical internal security consulting on current and future products. We don't merely provide high-level guidance but indeed get deeply embedded in the different engineering teams and do not mind hands-on work. Our projects span from classical infrastructure security projects, over cryptography, web3, and complex Rust projects, to securing our next generation of AI products. You will work in a small, highly technical team and collaborate with teams all across the company & world.   THE OPPORTUNITY - Design, review & verify robust security architecture in a heterogeneous environment - Conduct thorough security assessments and audits of existing architectures, recommending practical improvements - Stay updated with latest (blockchain) security trends, threats and mitigation techniques - Provide expertise to our blockchain teams, ensuring secure operational practices   WHAT YOU BRING - Proven experience as an IT security expert, with a strong background in application security - Experience in security testing diverse application - Experience with infrastructure security - Basic familiarity with security frameworks (OWASP, NIST, etc) - Excellent problem-solving skills and the ability to work in a dynamic, fast-paced environment - Strong communication and collaboration skills to effectively remotely work with stakeholders across the organization Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

О ПРОЕКТЕ Современная финтех-платформа для разработки и внедрения AI-агентов. Продукт позволяет автоматизировать бизнес-процессы и создавать интеллектуальных помощников для оптимизации работы команд. В проекте активно используются AI-инструменты для разработки и эксплуатации. ОСНОВНЫЕ ЗАДАЧИ — Настройка и развитие систем мониторинга и алертинга в Grafana. — Улучшение процессов логирования и отладки высоконагруженных систем. — Разработка, стабилизация и оптимизация CI/CD пайплайнов в GitLab. — Обеспечение отказоустойчивости Kubernetes-кластеров и настройка резервного копирования. — Стандартизация процессов эксплуатации и написание технической документации. ТРЕБОВАНИЯ К КАНДИДАТУ — Гражданство и нахождение на территории РФ. — Коммерческий опыт в DevOps от 3 до 5 лет. — Глубокие знания Kubernetes и технологий контейнеризации. — Опыт работы с GitLab CI и выстраивания релизных процессов. — Готовность работать в гибкой среде и активно использовать AI-инструменты в работе. БУДЕТ ПРЕИМУЩЕСТВОМ — Опыт развертывания LLM (vLLM, Ollama и аналоги). — Навыки работы с инструментами Grafana. — Использование AI-помощников в кодинге (Claude, Cursor и др.). УСЛОВИЯ РАБОТЫ — Полностью удаленный формат работы. — Возможность работы с передовым стеком технологий на стыке Fintech и AI. — Минимум бюрократии и фокус на инновационные подходы к разработке. — Достойный уровень компенсации и стабильный проект.

Location: Bengaluru, Karnataka, India, APAC From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran is looking for a high-performance, experienced engineer to be a part of a team of Site Reliability Engineers. You will be working closely with engineering teams, product managers, as well as support and sales engineers to build the future of the Fivetran Data Platform Reliability. As a member of the Site  Reliability Engineering team, you will take ownership of the overall performance and reliability of Fivetran’s infrastructure, the robustness of the deployment pipeline, as well as timely and effective incident response and resolution. You will take responsibility for the growth and stability of Fivetran’s infrastructure, and be a key player driving effective incident response and overall issue avoidance. Technologies You’ll Use Working knowledge of managed Kubernetes (EKS, AKS and GKE) Knowledge of Cloud Platforms and related tooling: AWS, Azure, GCP, Terraform, Ansible, Buildkite, Pulumi and ArgoCD Experience in Python/Shell scripting. Bonus if you have Java, GO, etc Experience with Linux operating systems internals and administration Experience with cloud networking like VPNs, Privatelinks, and Private Service connect (GCP) Experience with databases such as PostgreSQL What You’ll Do Responsible for ongoing reliability and robustness of Fivetran’s production infrastructure by monitoring availability, capacity, and throughput. Evolve systems by adding reliability into our product roadmap Coordinate the re-prioritize or fix critical bugs for support or sales requirements as needed Make recommendations to production infrastructure by interfacing with engineering to ensure 100% availability Ensure scalable artifacts deployment to all environments by automation scripts Constantly monitor infrastructure vulnerabilities and remedy them by working with the security team Skills We’re Looking For 9+  years of  experience working with SaaS products at scale. Working knowledge of managed Kubernetes (EKS, AKS and GKE). Knowledge of Cloud Platforms and related tooling: AWS, Azure, Google Cloud (GCP), Terraform, Ansible, Buildkite, Pulumi and ArgoCD. Experience in Python/Shell scripting and Go Language. Bonus if you have Java. Experience with Linux operating systems internals and administration Experience with cloud networking like Site-to-Site VPNs, Privatelinks and Private Service connect (GCP) # LI-HYBRID #LI-AV1 Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Canada; United States Workplace: Remote ABOUT DOCKER Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout. We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default. _______________________________________________________________________ The DHI Content team builds and maintains Docker Hardened Images: a catalogue of security-hardened system packages, container images and Helm charts designed to be minimal, up to date and safe to use in security-conscious and regulated environments. This is a supply-chain and open-source maintainer role rather than a conventional backend engineering role. You will work across upstream OSS projects, package and image definitions, Helm charts, Kubernetes, integration tests, vulnerability remediation and the controls that prove content is ready to publish. The work is broad by design: customers should be able to select hardened packages and images and, where relevant, deploy them through hardened charts without the pieces drifting apart. We are moving DHI content production towards a machine-first factory. Routine work should begin with a machine-produced change and pass through automated build, test, policy and review controls. Engineers add the most value by handling difficult ecosystems, making security judgements, improving standards and turning repeated human corrections into better tooling. You will use AI-assisted engineering extensively, but remain accountable for the evidence and quality behind every result. As a Senior Supply Chain Security Engineer, you will own substantial content and improvement work from upstream discovery through release and ongoing maintenance. You will be expected to close the loop on customer and security outcomes, not only submit individual definition changes. SUCCESS IN THIS ROLE LOOKS LIKE You will succeed by becoming a trusted end-to-end owner for hardened content. Within your first year, you should have delivered complex new or updated DHI content across packages, images and Helm charts, improved the factory or its quality gates, reduced recurring manual work and raised the capability of the engineers around you. RESPONSIBILITIES - Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls. - Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints. - Track upstream releases, semver patterns, monorepos, dependency chains and breaking changes, then make pragmatic decisions about when to update, patch, pin or deviate. - Triage and remediate vulnerabilities across OS packages, application dependencies, images and charts, including VEX and no-upstream-fix cases that require explicit security judgement. - Write and improve Go-based integration tests, validators and policy checks that prove packages, images and charts behave correctly in real environments. - Review human-authored and machine-authored pull requests against DHI standards, distinguish blocking issues from advice and give contributors a clear path forward. - Improve the DHI Factory by converting repeated work, review corrections and escaped defects into automation, tests, validators and reusable authoring patterns. - Help classify work into deterministic, specialist and judgement paths so people spend time where their expertise changes the outcome. - Partner with Product, Security, Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements. - Engage constructively with upstream maintainers when hardened deployment requirements expose issues or useful improvements. - Participate in the team's paid on-call rotation and drive learning from customer escalations, failed builds and content defects. - Communicate decisions, risks and progress clearly in a remote, async-first environment. QUALIFICATIONS REQUIRED - Strong experience with containers, Linux and Kubernetes in production or production-shaped environments. - Practical experience reading, adapting or maintaining Helm charts and diagnosing how chart templates, values and workload security settings affect deployment behaviour. - Experience maintaining software you did not originate, such as Linux packages, container images, open-source integrations, charts or a comparable downstream distribution. - Strong YAML and configuration-review skills, including care for conventions, consistency and downstream impact across a large catalogue. - Working knowledge of container and Kubernetes security, including non-root execution, UID and GID, capabilities, filesystem restrictions, image layers and multi-architecture builds. - Practical programming ability in Go or a comparable language, sufficient to write and review integration tests, validators and content automation. - Experience tracking upstream releases and reasoning about semver, breaking changes, dependency graphs and reproducible builds. - A maintainer mindset: you catch drift, improve patterns for the next contributor and consider the effect of a change across many downstream consumers. - Familiarity with GitHub-heavy open-source workflows, including pull requests, review, release tracking and upstream contribution. - Comfort using AI-assisted engineering critically while retaining ownership of security assertions, test evidence and release quality. - A strong operational mindset and clear written and spoken communication suited to a remote, async-first company. HELPFUL, BUT NOT REQUIRED - Experience as a maintainer for Alpine, Debian, Fedora, Wolfi, Homebrew or another package ecosystem. - Helm chart authorship or meaningful contribution to an upstream chart. - Experience with SBOMs, VEX, SLSA, Sigstore, cosign, provenance or artefact signing. - Experience with apk, deb, rpm, Go modules, Maven or Gradle, npm, pip, Cargo or other dependency ecosystems. - Experience building automation for package, image or chart creation, validation and release. - Experience with FIPS, FedRAMP, PCI or other regulated and security-conscious environments. WHAT TO EXPECT FIRST 30 DAYS - Build context on the DHI catalogue, its package, image and chart definitions, the DHI Factory and the team's definition of done. - Pair across both image and Helm chart work and ship a useful production change. - Learn the build, test, signing, publishing and vulnerability-remediation workflows. - Take part in reviews and an incident, escalation or failed-build learning session. FIRST 90 DAYS - Own a complex image and chart addition or update from upstream analysis through release. - Resolve a meaningful CVE, dependency or compatibility problem with clear evidence and customer impact in mind. - Improve at least one factory control, integration test, validator or reusable content pattern. - Review across artefact types and help another engineer take on a broader piece of work. ONE YEAR OUTLOOK (FIRST YEAR) - Be a trusted senior owner across hardened packages, images and Helm charts. - Deliver material catalogue growth or quality improvements without increasing human effort linearly with demand. - Reduce recurring manual work by moving a class of changes into a proven automated path. - Improve DHI's security posture, content availability and release reliability for customers. - Raise review quality and grow the team's ability to work across artefact and dependency ecosystems. Docker considers visa sponsorship on a case-by-case basis based on business needs. Compensation & Equity Canada: CA$210,627 – CA$341,690 + equity United States: $154,600 – $250,800 + equity ______________________________________________________________________ POSTING INFORMATION - Open vacancy: This posting is for an existing open role. - AI in hiring: Docker may use AI-assisted tools during our recruiting process. - Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent. ______________________________________________________________________ PERKS & BENEFITS - Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration. - Flexibility that fits your life – We trust you to manage your schedule while delivering great work. - Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break. - Home office support – Set up your workspace for comfort and success. - Technology stipend – Equivalent to US$100 net per month to help support your work. - Learning & development – Annual stipend for conferences, courses, certifications, and continued learning. - Parental leave – 16 weeks of paid parental leave after six months of employment. - Equity for all full-time employees – Share in Docker's long-term success as we continue to grow. - Comprehensive benefits – Medical, retirement, and paid holidays vary by country. - Docker swag – Because representing the whale never gets old. Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community. #LI-REMOTE

Задачи: — Эксплуатация и развитие инфраструктуры UEM-платформы SafeMobile — Поддержка крупных инсталляций у заказчиков — Документирование типовых сценариев развёртывания и настройки — Интеграция с инфраструктурой заказчиков: AD/LDAP, SIEM, ServiceDesk, PKI — Формирование требований к продукту на основе опыта эксплуатации Требования: — Опыт эксплуатации MDM/UEM на парке от 1000 устройств — Практический опыт хотя бы с одной из платформ: VMware Workspace ONE / AirWatch, Microsoft Intune, SOTI MobiControl, Samsung Knox Manage, Ivanti / MobileIron, Headwind MDM, BlackBerry UEM или аналоги — Понимание Android Enterprise: Work Profile, Fully Managed, Dedicated Device, COPE — Понимание iOS-управления: Supervised, DEP / ABM — Уверенный Linux — Навыки написания скриптов на Bash и Python — Понимание принципов работы сетей, VPN и PKI Будет плюсом: — Опыт миграции между MDM-платформами — Опыт работы в отраслях с массовыми парками: ритейл, логистика, курьерские службы, нефтегаз, банки, здравоохранение, транспорт — Знакомство с Samsung Knox, Zebra MX, Honeywell, Urovo и другими корпоративными вендорами устройств — Опыт работы с устройствами на AOSP Условия: — Удалённый или гибридный формат — Трудоустройство в аккредитованную ИТ-компанию — Команда из 50+ инженеров, без лишней бюрократии — Прямое влияние на развитие продукта: ваш опыт ложится в платформу

Location: San Francisco; Remote; Toronto; New York; Montreal Workplace: Hybrid ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE As a Site Reliability Engineer at Baseten, you'll define and codify the gold standards of day 2 operations for our ML infrastructure platform. You'll envision and build robust systems, processes, automations, and observability tooling that keep our platform reliable at scale — and that empower the broader organization to operate confidently. You'll work closely with engineering, forward-deployed and product teams: learning from recurring failure patterns, turning tribal knowledge into automated mitigations, and raising the operational floor for the entire company. EXAMPLE INITIATIVES You'll work on projects like these as part of the SRE team: - Improve Baseten SRE Practices, by instrumenting SLOs and SLIs, improving alerting and observability for all services. - Building AI-assisted tooling for incident triage and response. RESPONSIBILITIES - Own the reliability of Baseten's multi-cloud Kubernetes infrastructure, including incident response, post-mortems, and remediation tracking. - Build and maintain observability infrastructure — metrics, logging, dashboards, and alerting — as code. - Author, validate, and improve runbooks for recurring failure patterns, ensuring they're structured for low-context, safe execution. - Identify high-frequency failure patterns and convert them into automated mitigations or self-healing automations. - Diagnose and resolve runtime issues related to latency, memory behavior, GPU utilization, concurrency, and model lifecycle management. - Define and instrument SLOs and SLIs across customer workloads and internal services. - Navigate ambiguity, make principled tradeoffs, and avoid unnecessary complexity in the systems you build and the processes you define. REQUIREMENTS - Extensive hands-on experience with Kubernetes (multi-cloud experience across EKS, GKE, or similar is a strong plus). - Experience in building and maintaining scalable infrastructure. - Strong foundation in observability tooling: metrics (VictoriaMetrics, Prometheus), logging (Loki, ELK), dashboards (Grafana), and alerting pipelines. Observability-as-code experience is a plus. - Experience with infrastructure-as-code (Terraform, Helm) and GitOps workflows (Flux CD, ArgoCD). - Experience writing and improving runbooks, leading incident response, and doing post-mortem analysis. - Comfort working at the intersection of engineering and operations — you write code, but you also think deeply about process, escalation paths, and operational leverage. - Familiarity with incident management platforms (incident.io http://incident.io or similar) is a plus. - No prior ML experience required, but curiosity about how ML models are deployed and served at scale will serve you well. BENEFITS - Competitive compensation, including meaningful equity - (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents - Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) - Paid parental leave - Fertility and family-building stipend through Carrot - (U.S. only) Company-facilitated 401(k) - Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Location: San Francisco Bay Area, USA Workplace: OnSite WHY WORK AT HIGGSFIELD AI? Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands. We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like. ROLE OVERVIEW Higgsfield AI is looking for a hands-on Member of Technical Staff, Infrastructure Security to build, secure, and operate the systems that protect our corporate infrastructure, employee devices, identities, and applications. As we scale globally, you'll own the technical implementation of security controls across identity and access management, endpoint security, SaaS applications, and corporate networks. Working closely with IT, Security, and Engineering, you'll identify vulnerabilities, implement practical solutions, and automate security operations. This is a highly technical, hands-on role where you'll personally configure, troubleshoot, and maintain critical security systems rather than primarily managing vendors or directing other teams. We're looking for a well-rounded security engineer with strong technical judgment who can prioritize risks, move quickly, and build scalable security solutions without creating unnecessary friction. WHAT YOU'LL DO IDENTITY & ACCESS SECURITY - Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications. - Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and role-based access controls (RBAC). - Secure and automate employee joiner, mover, and leaver (JML) workflows. - Implement least-privilege access and strengthen authentication and authorization practices. ENDPOINT & CORPORATE APPLICATION SECURITY - Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR). - Secure SaaS applications through access management, permissions, provisioning, and configuration reviews. - Design and implement Zero Trust access controls based on user identity, device posture, and least-privilege principles. - Identify and remediate security gaps across corporate systems and applications. SECURITY AUTOMATION & INCIDENT RESPONSE - Build scripts, API integrations, and automated workflows to improve security operations and reduce manual processes. - Develop and maintain security monitoring, alerting, and detection capabilities. - Investigate compromised accounts, suspicious activity, and endpoint security incidents, driving containment and remediation. - Troubleshoot security infrastructure issues and continuously improve technical controls. TECHNICAL OWNERSHIP & SECURITY ENGINEERING - Identify and prioritize corporate security risks, balancing security requirements with business and operational needs. - Lead technical security initiatives from design and implementation through ongoing operations. - Partner with IT and Engineering to establish scalable security standards and practical guardrails. - Evaluate and implement security tooling while maintaining direct ownership of configuration and operations. WHAT WE'RE LOOKING FOR - 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure, ideally in a high-growth technology environment. - Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems. - Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management. - Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR. - Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles. - Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations. - Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices. - Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks. - Broad technical expertise across corporate security infrastructure rather than specialization in a single area such as IAM, SOC, or endpoint management. COMPENSATION & BENEFITS • We offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth. • Base Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location. • Equity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth. • • Benefits: We offer a comprehensive benefits package designed to support employees professionally and personally • The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team. • Significant ownership, direct impact, and opportunities for professional growth as the company scales.   This is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams. Higgsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Задачи: — Создание и поддержка пайплайнов сборки и деплоя (GitHub Actions). — Управление контейнерами (Docker, Nomad/K8s, Podman). — Поддержка, ремонт и масштабирование систем с фокусом на безопасность. — Настройка мониторинга (Prometheus, Grafana, ELK) и Alertmanager. — Участие в проектировании архитектуры и внедрение IaC-подходов. Требования: — От 3 лет коммерческого опыта в DevOps. — Владение Docker, Nomad/K8s, Consul, Traefik, Vault. — Уверенное владение Ansible и скриптингом (Bash, Python). — Опыт работы с MySQL и понимание twelve-factor app. — Навыки создания дашбордов в Grafana. Условия: — Работа в продукте с более чем 10 миллионами пользователей. — 28 дней отпуска + 7 дополнительных Day-off в году. — 100% оплата больничных и компенсация обучения/литературы. — Гибкий старт дня (10:00–11:00). — Комфортный офис в центре Санкт-Петербурга (м. Площадь Восстания).

Задачи: — Развертывание и тонкая настройка Kubernetes-кластеров в production. — Построение масштабируемой среды в AWS под высоконагруженные Go-сервисы. — Разработка и внедрение Terraform-модулей с чистого листа. — Подготовка базы для систем на базе Kafka / Redpanda. — Тесное взаимодействие с Backend-командой и участие в архитектурных комитетах. Требования: — 5+ лет опыта в DevOps, значительная часть в Fintech/Banking. — Глубокие практические знания AWS (Production). — Опыт эксплуатации Kubernetes кластеров в реальных боевых условиях. — Умение описывать инфраструктуру как код и писать переиспользуемые Terraform модули. — Английский B2–C1. — Обязательное физическое нахождение в Евросоюзе. Будет плюсом: — Опыт работы с Redpanda или Kafka. — Понимание требований регуляторов к финансовым системам и данным. — Опыт в Highload проектах. Условия: — Работа полностью удалённая с обязательным нахождением в ЕС. — Таймзона работы с 9:00 по СЕТ. — Проект немецкого Fintech / Банкинг. — Работа с современными инструментами и Cloud-Native подходом. — Работа в выделенной экспертной команде. — Стабильный проект с четкими целями и профессиональным менеджментом.

Location: Limassol; Nicosia Workplace: hybrid The Role:  We are seeking a motivated and curious Junior Corporate Services Systems Engineer to join our Systems Engineering team. In this role, you will play a key part in the day-to-day maintenance, administration, and support of our cloud systems and services.  This is an excellent opportunity for someone eager to kickstart their career in IT operations, gain hands-on experience with modern cloud infrastructure, and learn from experienced engineers in a collaborative environment. The main responsibilities of the position include: Manage and administer multi-cloud subscriptions (PaaS/SaaS) across Microsoft Azure and other providers, overseeing implementation, capacity planning, and performance monitoring. Resolve complex technical issues by providing Level 2 and Level 3 troubleshooting, incident management, and service-level tracking. Oversee the Microsoft Entra ID (Azure AD) environment , including Conditional Access, identity protection, group management, and Single Sign-On (SSO) integrations. Manage Microsoft 365 Enterprise products (SharePoint, Teams, compliance tools) and administer Intune MDM for Windows, Mac, iOS, and Android endpoints. Enforce role-based access controls (RBAC) by maintaining the Enterprise Access Control Matrix. Partner with Information Security to research and deploy system hardening solutions, conduct routine security audits, and identify vulnerabilities. Deploy automated patch management solutions for Microsoft and third-party software, including executing emergency patching procedures. Liaise with external partners and cross-functional teams to design, deliver, and document new IT solutions that support business growth. Mentor and train the IT Service Desk team , creating detailed documentation and work instructions to elevate overall support quality. Main requirements: BSc/MSc in Information Technology or any other relevant degree At least 2 years of ex perience in a Systems Administration or relevant position Strong team player, good communications skills Strong analytical and troubleshooting skills Ability to cope with stress and meet deadlines Ability to multitask and prioritise Problem solving and critical thinking skills Self-motivated, proactive and efficient Deep understanding of the following: Security Hardening & Patch Management Cloud Systems Management: Azure Mobile Device Management (MDM) Windows & MacOS Microsoft 365 Products Scripting Skills Benefit from: Attractive remuneration package plus performance related reward Private health insurance Corporate pension fund Intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy Policy and the Confidentiality Undertaking.

Location: Remote Workplace: Remote WHO WE ARE Hi, we're DuckDuckGo, the online protection company and remote-first team of 400+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, our annual revenue is in the hundreds of millions USD and millions use our browser on Mac https://spreadprivacy.com/introducing-duckduckgo-for-mac/, Windows https://spreadprivacy.com/windows-browser-open-beta/, iOS https://spreadprivacy.com/duckduckgo-privacy-browser-ios14/, and Android https://spreadprivacy.com/introducing-app-tracking-protection/, our search engine https://duckduckgo.com/, and the DuckDuckGo subscription https://duckduckgo.com/pro. We also offer private, useful, and optional AI, including Duck.ai https://duck.ai/, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place.   Our culture https://duckduckgo.com/how-we-work of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! YOUR TEAM AND ROLE Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include: - SERP security mitigations - Agentic browsing security mitigations - Agentic browser hardening - Browser and sync security audits As a Senior Security Engineer, App Sec, you'll execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), manage application security scanning infrastructure setup, build and maintain harnesses that get security fixes out automatically, harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! ABOUT YOU - 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) - Recent experience creating security focused agentic harnesses - Experience influencing large feature designs to have security baked in from the start - Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). - An understanding of the web security model (such as the Same Origin Policy); experience with CSP, CORS, SameSite cookies, sec-fetch-*, CORB, CORP, Sanitizer API, and Trusted Types is beneficial - Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) - Familiarity with security testing tools and frameworks - Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster - Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams COMPENSATION This role is paid on a regional pay scale, in local currency, and stock options: - United States: $190,500 USD annually - United Kingdom: £134,600 GBP annually - Canada: C$253,500 CAD annually - Europe/Rest of World: €157,350 EUR annually In Spain, pay is expected to transition to the EUR scale on January 1, 2027, and in other Europe/Rest of World countries on February 1, 2027.   Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation.   Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK.   Our Team Member Support Guide https://duckduckgo.com/assets/hiring/team_support_guide.pdf explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. HIRING PROCESS Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire https://duckduckgo.com/how-we-hire. DIVERSITY, EQUITY AND INCLUSION DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws. We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to careers@duckduckgo.com to let us know the nature of your request. PLEASE NOTE THAT: - You’ll be required to attend meetings on camera via video conferencing - Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend. - While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week. - A successful candidate must pass a background check as a condition of joining the team. - By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work. Disclosure Statement: Use of AI in Hiring Process As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process. Key Principles: - Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy https://duckduckgo.com/static-assets/files/pages/careers/DuckDuckGo-Recruiting-Privacy-Policy-effective-September-30-2025.pdf. We ensure that your personal information is protected and used solely for recruitment purposes. - Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors. - Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us. By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us as at careers@duckduckgo.com. Thank you for your interest in joining DuckDuckGo! #LI-DNI

Location: Montreal Workplace: remote ABOUT YOU The ideal candidate will be responsible for designing, implementing, and managing cutting-edge network and infrastructure solutions, as well as providing support to development teams. ABOUT US   Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.   For more information, visit xsolla.com. Responsibilities Ensure the smooth operation of the company's geo-distributed infrastructure Maintenance and configuration of network equipment, bare metal servers, NAS Maintenance and configuration of virtualization system (VMWare) Administer multiple Linux servers Monitor the status of services and prompt resolution of emerging problems Automate administrative tasks Participate in the development and improvement of infrastructure Interact with developers, database administrators, DevOps engineers, architects Qualifications & Skills 5+ years of experience in a similar position Excellent knowledge of configuring and operating active network equipment: switches, routers, firewalls Strong knowledge of network technologies: VLAN, STP, static routing, PBR, OSPF, BGP, ACL, IPSEC, OpenVPN, DNS, DHCP, etc. Experience with VMWare: vCenter, vSAN, Distributed Switch, HA Working knowledge of HP/Dell servers and storage systems Experience in the administration of Debian/Ubuntu family Linux Experience in the administration of monitoring systems, logging, and collection of metrics Intermediate or higher level of spoken and technical English Excellent interpersonal and communication skills Strong analytical and problem-solving abilities Ability to collaborate with cross-functional teams Nice to Have Knowledge/experience with DevOps practices Experience with IaC, Ansible/Puppet/Terraform configuration management systems Experience with Google Cloud Platform or Amazon Web Services Understanding of information security principles, experience with SOC2/PCI DSS infrastructure Familiarity with Kanban methodology A big plus will be the experience of working on large projects with a significant personal contribution Benefits:We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.    Equal Employment Opportunity Statement: Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act.

Location: Hong Kong, Hong Kong SAR OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Team Our Trading Product Group leads the design of all the products on OKX's derivatives trading exchange, including spot trading, spot margin, futures, leveraged tokens, trading options etc. What You’ll Be Doing AI Agent Review & Escalation - Review AI agent outputs across risk monitoring workflows — assess findings for accuracy, identify false positives, and escalate risk events through the appropriate channels with clear, well-documented rationale. Risk Patrol Operation - Operate AI-assisted investigation workflows covering key risk metrics. Verify agent reasoning, identify analytical gaps, and ensure the quality output of investigations. Market Abuse Investigation - Review AI-surfaced signals related to suspected market abuse, assess the validity, and escalate to the appropriate team with a structured findings report. SOP Development & Agent Skill Authorship - Translate frontline risk experience into structured SOPs and agent skill sets. Identify blind spots in current detection logic, document edge cases, and collaborate with the Product team to continuously improve automated coverage. Risk System Quality Review - Conduct regular reviews of agent performance — assessing output quality, surfacing systematic errors, and proposing refinements. Serve as a quality gate between automated risk outputs and business-level decisions. Cross-Functional Risk Coordination - Communicate escalated risk findings clearly to Product, Compliance, Legal, and Operations teams. Ensure AI-generated intelligence is accurately interpreted and translated into actionable, well-documented recommendations. What We Look For In You 3+ years in trading risk, ideally at a crypto exchange or derivatives venue. Deep knowledge of attack vectors: pump-and-dump, wash trading, liquidation suicide attacks, Sybil patterns, flash crashes. Strong data intuition — Able to QA AI-generated analysis, spot anomalies in outputs, and challenge agent conclusions. Comfort operating in an AI-augmented workflow: prompting agents, reading structured outputs, making final calls under time pressure. Excellent judgment in ambiguous, high-pressure situations — You decide, the agent advises. Cross-functional collaboration skills; able to work with PMs, engineers, and compliance. Nice-To-Haves Hands-on experience with LLM-based tools, SQL, or Python — Enough to validate AI-generated queries. Personal trading experience or financial risk certification (FRM/CFA). Mandarin proficiency for collaboration with technical teams. Experience writing or refining risk SOPs or runbooks. Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Perks & Benefits Competitive total compensation package L&D programs and education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .