Location: Sofia, Bulgaria
About Workato
Workato is the leading Control and Execution Platform for Enterprise AI — the neutral platform enterprises trust to put AI to work across their business. Workato unifies data, applications, and processes into a single platform so AI can reliably orchestrate business processes in production at enterprise scale. Built on more than a decade of running mission-critical processes for over half the Fortune 500 — including Nasdaq, Amazon, Cisco, Vodafone, Atlassian, and Lucid Motors — Workato turns over 14,000 enterprise systems AI needs to act on into one governed execution layer. For more information, visit
workato.com
.
Why join us?
Ultimately, Workato believes in fostering a
flexible, trust-oriented culture that empowers everyone to take full ownership of their roles
. We are driven by
innovation
and looking for
team players
who want to actively build our company.
But, we also believe in
balancing productivity with self-care
. That’s why we offer all of our employees a vibrant and dynamic work environment
along with a multitude of benefits
they can enjoy inside and outside of their work lives.
If this sounds right up your alley, please submit an application. We look forward to getting to know you!
Also, feel free to check out why:
Business Insider
named us an “enterprise startup to bet your career on”
Forbes’ Cloud 100
recognized us as one of the top 100 private cloud companies in the world
Deloitte Tech Fast 500
ranked us as the 17th fastest growing tech company in the Bay Area, and 96th in North America
Quartz
ranked us the #1 best company for remote workers
Responsibilities
As our PostgreSQL DBA, you will be the go-to engineer for everything data-layer: index and schema design on multi-terabyte tables, query optimization for application teams, connection pooling, upgrades, and migrations. Our PostgreSQL runs on Amazon Aurora — operating a large, fast-growing fleet consistently: turning one-off procedures into reliable automation, keeping dozens of clusters healthy at once, and helping developers use the database well. You'll split your time between a support rotation for incoming developer requests and longer-cycle reliability and automation projects.
In this role, y
ou will also be responsible to:
Own day-to-day PostgreSQL operations across all production data centers: index creation on large/partitioned tables, query-plan analysis, schema reviews, data migrations.
Partner with application teams on data-model decisions — design, partitioning, retention, consolidation vs. standalone clusters — and push back with data when a design won't scale.
Operate and tune Aurora PostgreSQL: parameter groups, replicas, failover behavior, capacity planning.
Run and evolve our PgBouncer connection-pooling layer.
Turn manual runbooks into released, repeatable automation: seamless upgrade, switchover, database/user provisioning, grants management (Terraform + Ansible).
Drive incident response and RCAs for database-related issues, and land the follow-up actions.
Maintain and improve database observability (postgres_exporter, VictoriaMetrics dashboards and alerts).
Take part in the team's duty rotation handling developer requests, with protected focus time off-duty.
Requirements
Qualifications / Experience / Technical Skills
5+ years of hands-on operational PostgreSQL experience (DBA / database reliability role).
Strong command of query plans, indexing strategy, and performance work on multi-TB tables.
Production experience with managed PostgreSQL (Aurora or RDS) and a clear-eyed view of its constraints.
Working proficiency with Terraform and Infrastructure-as-Code practices; comfortable in Linux.
Experience with connection pooling (PgBouncer or similar) in production.
Practical experience with logical replication, major-version upgrades, and low-downtime migration techniques.
Scripting ability (Bash, Python or GO) and an automation-first mindset.
Experience with cloud infrastructure (AWS preferred); strong incident-management and RCA skills.
Nice to Haves
Operational exposure to ClickHouse, OpenSearch, or Redis/Valkey, Neo4j.
Kubernetes fundamentals (our poolers, proxies, and exporters run on EKS).
Experience with Vault, ArgoCD, or GitOps workflows.
Comfort using AI coding assistants to accelerate routine analysis and tooling.
Tech Stack
AWS • Aurora PostgreSQL • Kubernetes • PgBouncer • Terraform • Ansible • VictoriaMetrics • Vault • Linux
(REQ ID: 2960)
Location: Berlin, Germany; Frankfurt, Germany; Munich, Germany
About Workato
Workato is the leading Control and Execution Platform for Enterprise AI — the neutral platform enterprises trust to put AI to work across their business. Workato unifies data, applications, and processes into a single platform so AI can reliably orchestrate business processes in production at enterprise scale. Built on more than a decade of running mission-critical processes for over half the Fortune 500 — including Nasdaq, Amazon, Cisco, Vodafone, Atlassian, and Lucid Motors — Workato turns over 14,000 enterprise systems AI needs to act on into one governed execution layer. For more information, visit
workato.com
.
Why join us?
Ultimately, Workato believes in fostering a
flexible, trust-oriented culture that empowers everyone to take full ownership of their roles
. We are driven by
innovation
and looking for
team players
who want to actively build our company.
But, we also believe in
balancing productivity with self-care
. That’s why we offer all of our employees a vibrant and dynamic work environment
along with a multitude of benefits
they can enjoy inside and outside of their work lives.
If this sounds right up your alley, please submit an application. We look forward to getting to know you!
Also, feel free to check out why:
Business Insider
named us an “enterprise startup to bet your career on”
Forbes’ Cloud 100
recognized us as one of the top 100 private cloud companies in the world
Deloitte Tech Fast 500
ranked us as the 17th fastest growing tech company in the Bay Area, and 96th in North America
Quartz
ranked us the #1 best company for remote workers
Responsibilities
As our PostgreSQL DBA, you will be the go-to engineer for everything data-layer: index and schema design on multi-terabyte tables, query optimization for application teams, connection pooling, upgrades, and migrations. Our PostgreSQL runs on Amazon Aurora — operating a large, fast-growing fleet consistently: turning one-off procedures into reliable automation, keeping dozens of clusters healthy at once, and helping developers use the database well. You'll split your time between a support rotation for incoming developer requests and longer-cycle reliability and automation projects.
In this role, y
ou will also be responsible to:
Own day-to-day PostgreSQL operations across all production data centers: index creation on large/partitioned tables, query-plan analysis, schema reviews, data migrations.
Partner with application teams on data-model decisions — design, partitioning, retention, consolidation vs. standalone clusters — and push back with data when a design won't scale.
Operate and tune Aurora PostgreSQL: parameter groups, replicas, failover behavior, capacity planning.
Run and evolve our PgBouncer connection-pooling layer.
Turn manual runbooks into released, repeatable automation: seamless upgrade, switchover, database/user provisioning, grants management (Terraform + Ansible).
Drive incident response and RCAs for database-related issues, and land the follow-up actions.
Maintain and improve database observability (postgres_exporter, VictoriaMetrics dashboards and alerts).
Take part in the team's duty rotation handling developer requests, with protected focus time off-duty.
Requirements
Qualifications / Experience / Technical Skills
5+ years of hands-on operational PostgreSQL experience (DBA / database reliability role).
Strong command of query plans, indexing strategy, and performance work on multi-TB tables.
Production experience with managed PostgreSQL (Aurora or RDS) and a clear-eyed view of its constraints.
Working proficiency with Terraform and Infrastructure-as-Code practices; comfortable in Linux.
Experience with connection pooling (PgBouncer or similar) in production.
Practical experience with logical replication, major-version upgrades, and low-downtime migration techniques.
Scripting ability (Bash, Python or GO) and an automation-first mindset.
Experience with cloud infrastructure (AWS preferred); strong incident-management and RCA skills.
Nice to Haves
Operational exposure to ClickHouse, OpenSearch, or Redis/Valkey, Neo4j.
Kubernetes fundamentals (our poolers, proxies, and exporters run on EKS).
Experience with Vault, ArgoCD, or GitOps workflows.
Comfort using AI coding assistants to accelerate routine analysis and tooling.
Tech Stack
AWS • Aurora PostgreSQL • Kubernetes • PgBouncer • Terraform • Ansible • VictoriaMetrics • Vault • Linux
(REQ ID: 2960)
Location: Barcelona, Spain; Madrid, Spain
About Workato
Workato is the leading Control and Execution Platform for Enterprise AI — the neutral platform enterprises trust to put AI to work across their business. Workato unifies data, applications, and processes into a single platform so AI can reliably orchestrate business processes in production at enterprise scale. Built on more than a decade of running mission-critical processes for over half the Fortune 500 — including Nasdaq, Amazon, Cisco, Vodafone, Atlassian, and Lucid Motors — Workato turns over 14,000 enterprise systems AI needs to act on into one governed execution layer. For more information, visit
workato.com
.
Why join us?
Ultimately, Workato believes in fostering a
flexible, trust-oriented culture that empowers everyone to take full ownership of their roles
. We are driven by
innovation
and looking for
team players
who want to actively build our company.
But, we also believe in
balancing productivity with self-care
. That’s why we offer all of our employees a vibrant and dynamic work environment
along with a multitude of benefits
they can enjoy inside and outside of their work lives.
If this sounds right up your alley, please submit an application. We look forward to getting to know you!
Also, feel free to check out why:
Business Insider
named us an “enterprise startup to bet your career on”
Forbes’ Cloud 100
recognized us as one of the top 100 private cloud companies in the world
Deloitte Tech Fast 500
ranked us as the 17th fastest growing tech company in the Bay Area, and 96th in North America
Quartz
ranked us the #1 best company for remote workers
Responsibilities
As our PostgreSQL DBA, you will be the go-to engineer for everything data-layer: index and schema design on multi-terabyte tables, query optimization for application teams, connection pooling, upgrades, and migrations. Our PostgreSQL runs on Amazon Aurora — operating a large, fast-growing fleet consistently: turning one-off procedures into reliable automation, keeping dozens of clusters healthy at once, and helping developers use the database well. You'll split your time between a support rotation for incoming developer requests and longer-cycle reliability and automation projects.
In this role, y
ou will also be responsible to:
Own day-to-day PostgreSQL operations across all production data centers: index creation on large/partitioned tables, query-plan analysis, schema reviews, data migrations.
Partner with application teams on data-model decisions — design, partitioning, retention, consolidation vs. standalone clusters — and push back with data when a design won't scale.
Operate and tune Aurora PostgreSQL: parameter groups, replicas, failover behavior, capacity planning.
Run and evolve our PgBouncer connection-pooling layer.
Turn manual runbooks into released, repeatable automation: seamless upgrade, switchover, database/user provisioning, grants management (Terraform + Ansible).
Drive incident response and RCAs for database-related issues, and land the follow-up actions.
Maintain and improve database observability (postgres_exporter, VictoriaMetrics dashboards and alerts).
Take part in the team's duty rotation handling developer requests, with protected focus time off-duty.
Requirements
Qualifications / Experience / Technical Skills
5+ years of hands-on operational PostgreSQL experience (DBA / database reliability role).
Strong command of query plans, indexing strategy, and performance work on multi-TB tables.
Production experience with managed PostgreSQL (Aurora or RDS) and a clear-eyed view of its constraints.
Working proficiency with Terraform and Infrastructure-as-Code practices; comfortable in Linux.
Experience with connection pooling (PgBouncer or similar) in production.
Practical experience with logical replication, major-version upgrades, and low-downtime migration techniques.
Scripting ability (Bash, Python or GO) and an automation-first mindset.
Experience with cloud infrastructure (AWS preferred); strong incident-management and RCA skills.
Nice to Haves
Operational exposure to ClickHouse, OpenSearch, or Redis/Valkey, Neo4j.
Kubernetes fundamentals (our poolers, proxies, and exporters run on EKS).
Experience with Vault, ArgoCD, or GitOps workflows.
Comfort using AI coding assistants to accelerate routine analysis and tooling.
Tech Stack
AWS • Aurora PostgreSQL • Kubernetes • PgBouncer • Terraform • Ansible • VictoriaMetrics • Vault • Linux
(REQ ID: 2960)
Задачи:
— Проектирование, развёртывание и поддержка инфраструктуры для микросервисных приложений (on‑prem и/или облако);
— Построение и развитие CI/CD-процессов (от сборки до доставки в production);
— Контейнеризация и оркестрация сервисов (Docker, Kubernetes);
— Настройка и поддержка систем мониторинга, логирования и алёртинга;
— Обеспечение отказоустойчивости, масштабируемости и безопасности инфраструктуры;
— Участие в архитектурных решениях по инфраструктуре совместно с разработчиками;
— Автоматизация рутинных операций (infrastructure as code, скрипты, tooling);
— Взаимодействие с командами разработки и бизнеса при запуске новых сервисов и релизов.
Требования:
— Опыт коммерческой работы DevOps/SRE/Infra‑инженером от 3–4 лет;
— Уверенное владение Linux и сетевыми технологиями (TCP/IP, HTTP, DNS, SSL/TLS);
— Опыт работы с контейнерами и оркестраторами: Docker, Kubernetes (k8s);
— Опыт настройки и эксплуатации веб‑инфраструктуры: Nginx, балансировка нагрузки, reverse proxy;
— Понимание и практика CI/CD (GitLab CI / Jenkins);
— Опыт работы с реляционными и NoSQL БД (например, PostgreSQL, MongoDB, Redis);
— Уверенная работа с Git, умение выстраивать процессы вокруг него;
— Опыт работы с системами очередей/стриминга (RabbitMQ, Kafka или аналоги);
— Умение писать скрипты для автоматизации (bash, Python или аналогичный язык).
Будет плюсом:
— Опыт работы с в области создания ИИ решений;
— Опыт работы с публичными облаками;
— Знание подходов trunk based development, feature toggles, blue‑green / canary deployments;
— Опыт настройки инструментов мониторинга и логирования (Prometheus, Grafana, ELK/EFK и т.п.);
— Базовые знания языков программирования (Python/Go) для написания сервисных утилит.
Условия:
— Официальное оформление по ТК РФ;
— Конкурентоспособная "белая" зарплата + годовой бонус;
— Удаленная работа на территории РФ;
— Расширенный социальный пакет (ДМС (со стоматологией), льготы и компенсации предусмотренные коллективным договором для сотрудника и семьи, тренажерный зал с сауной в офисе и пр.);
— Ежегодная индексация ЗП;
— Оплачиваемые компанией курсы, обучение в академии Росатома, профессиональные подкасты, книги, вебинары и прочее;
— Пятидневный режим работы.
Location: United States & Canada
Workplace: Remote
About WorkOS 🚀
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
ABOUT THE SECURITY PLATFORM TEAM
The Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience.
Our work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company.
We're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path.
WHO WE'RE LOOKING FOR
- A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.
- Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each.
- A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on.
- A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path.
- A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.
- Excited about AI. You're embracing AI and automation to scale platform work and reduce toil.
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.
RESPONSIBILITIES
- Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
- Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.
- Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.
- Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.
QUALIFICATIONS
- 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
- Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
- Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
- Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
- Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.
Benefits and Perks (US Only) 💖
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
В Яндекс Практикуме ищут наставника на курс «Основы Apache Kafka». Наставник сопровождает студентов, отвечает на вопросы в чате, помогает с трудностями на протяжении всего обучения. Проводит воркшопы — онлайн-занятия по шаблону с активным участием студентов, модерирует диалог и отвечает на вопросы. Помогает студентам ставить цели, рефлексировать, делать выводы и быть самостоятельными. Проводит Q&A-сессии — онлайн-занятия свободной формы, где студенты задают вопросы по инструментам и их использованию.
Требования:
— Глубокое знание языка Python, Go или Java.
— Понимание и опыт работы с Apache Kafka, Kafka Connect, Kafka Streams.
— Опыт интеграции Kafka с Apache Spark, Apache Flink, Apache Hadoop.
— Опыт интеграции Kafka с базами данных PostgreSQL, Cassandra и др.
— Знание Kafka MirrorMaker, Kafka REST Proxy, Schema Registry, Kafka Connect UI.
— Будет плюсом опыт написания учебных материалов.
Условия:
— Удалённое сотрудничество.
— Частичная занятость около 15 часов в неделю.
— Вознаграждение около 15 000 ₽ в месяц.
— Возможность освежить знания, реализовать потенциал и влиять на качество образования.
— Развитие мягких навыков: публичные выступления, обратная связь, объяснение сложных вещей простыми словами, формирование безопасной образовательной среды.
— Бесплатное обучение в Школе наставников и плавное погружение в сотрудничество.
— Выдача сертификатов о социально-полезной деятельности.
— Возможность писать статьи и участвовать в конференциях, мероприятиях и подкастах Яндекс Практикума.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available locations:
Lisbon, Portugal or London, UK.
This role requires two days in office, it is not a fully remote role.
About The Team
Application Security is responsible for Cloudflare’s fast-growing security product portfolio including WAF, Page Shield, Web Asset Management and API Shield. Being part of Cloudflare means working at internet scale and we are uniquely positioned to tackle challenging problems related to being connected to more networks, websites and customers than any other provider worldwide. Working at great scale by default (to an extent not offered by most other employers in big tech) means pushing boundaries well beyond what commodity solutions like Nginx and Kafka provide out of the box. You’ll be working with custom components that have been created in an engineering-driven and pragmatic way - our code is well-tested and documented and uses modern ecosystems like Go and Rust. This gives you confidence that you will spend your time having an impact and not firefighting!
You’d be joining a high-profile part of the business that can really accelerate and support your career. Cloudflare has a strong track record of growing in a thoughtful way and hires carefully so we’re confident that you will enjoy working with your colleagues here!
About You
You must have at least 5 years of professional experience working hands-on as a software developer
. We require proficiency with at least one of Go or Rust, plus exposure to devops tooling like but not limited to Kubernetes, Salt, Kafka or Systemd. Strong Linux / Unix fundamentals will be very helpful. You must have experience working with distributed systems at scale. Experience with cyber security is preferred but not essential.
Cloudflare’s culture is busy and multifaceted, and people who succeed here are persistent, have a can-do attitude and a genuine willingness to assume good faith in others. This last quality in particular requires them to be empathetic and emotionally intelligent, so you’re someone willing to take responsibility for the culture and environment that you create around you.
What You’ll Do
Design systems and write code following bleeding edge industry best practices and help others on the team do the same. Review RFCs, technical specifications and code.
Deploy and maintain live software-based services at scale (up to 100m requests / second, 1m customers). Take regular shifts as part of the team’s On Call rota.
Support and grow other Engineers through knowledge sharing.
Keep up to date with trends in detecting current and emerging security risks to web applications and provide input on how these impact Cloudflare’s products.
Work with Engineers and Product Managers outside your immediate team in communicating our roadmap and getting things done.
Benefits
Cloudflare offers a positive and stimulating place to work, where you can enjoy friendly relationships with your colleagues and the freedom to have real impact on our products and customers. While the work is demanding, the company is unusual in offering an unlimited leave policy. This is not a “race to the bottom” or proxy for reducing the amount of leave taken; leaders around the company model the behaviour of always taking the time off that they need.
In addition to a competitive base salary, Cloudflare offers an equity program with stock grants on joining and regular refreshers linked to performance. And in common with other big tech companies, we offer medical and dental insurance, mental health support, a tax efficient defined contributions pension plan and life insurance.
Equity
This role is eligible to participate in Cloudflare’s equity plan.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Задачи:
— Подбирать и покупать серверы/VPS под задачи.
— Вводить серверы в эксплуатацию.
— Поддерживать инфраструктуру в рабочем состоянии.
— Работать с Docker images, networks и volumes.
— Настраивать деплой и откат.
— Организовывать хранение и просмотр логов.
— Следить за изоляцией контейнеров и минимизацией рисков.
— Работать с AWS, включая настройку безопасного SSH-доступа, firewall, поддержание актуальности пакетов и ОС, базовый аудит инфраструктуры.
— Настраивать TLS/SSL, DNS, reverse proxy.
— Разделять публичный и административный контуры.
— Делать бэкапы.
— Документировать инфраструктуру.
Требования:
— Знание Linux: systemd, сеть, диски и файловые системы, пользователи и права, пакеты, диагностика проблем.
— Опыт эксплуатации Docker в production.
— Понимание WireGuard/VPN: ключи, маршруты, peer'ы, split access, сегментация сети.
— Минимальные знания AWS: EC2, VPC/networking, IAM, S3.
— Знание Terraform/CloudFormation будет большим плюсом.
— Понимание базовой серверной безопасности (hardening).
Будет плюсом:
— Опыт работы с Caddy/Nginx.
— Опыт с CI/CD: GitHub Actions, GitLab CI.
— Опыт с GHCR.
— Опыт работы с несколькими VPS.
— Разделение app/edge, отдельный административный контур.
— Опыт эксплуатации PostgreSQL: бэкапы, доступы, восстановление.
— Понимание типичных атак на SSH, панели управления, docker.sock, Swarm, Kubernetes.
— Опыт с Ansible или собственными скриптами для автоматизации настройки серверов.
Требования к кандидату:
— Готовность работать с production.
— Умение самостоятельно разбираться в проблемах.
— Понимание последствий изменений.
— Забота о безопасности заранее.
— Автоматизация рутинных задач.
— Умение объяснять разработчикам вопросы безопасности и предлагать решения.
— Способность видеть инфраструктуру целиком, а не только отдельные компоненты.
Задачи:
— поддерживать и развивать IP-АТС на базе Asterisk;
— настраивать dialplan, SIP-транки, SIP-агентов и маршрутизацию звонков;
— интегрировать backend-приложения с Asterisk через ARI / AMI;
— диагностировать проблемы с SIP-трафиком и качеством звонков;
— обеспечивать безопасность и отказоустойчивость телефонии;
— работать с firewall, fail2ban, защитой от SIP/brute-force атак;
— работать с CDR и записями разговоров: хранение, ротация и контроль;
— поддерживать инфраструктуру на Linux, MariaDB/MySQL, Redis, Nginx, cron, Samba;
— настраивать и поддерживать мониторинг через Grafana Alloy, Heplify;
— вести техническую документацию и участвовать в улучшении инфраструктуры.
Требования:
— от 2 лет практического опыта с Asterisk;
— уверенное понимание SIP: регистрация, NAT traversal, кодеки, диагностика проблем;
— практический опыт с ARI и/или AMI;
— уверенное администрирование Linux;
— опыт работы с MariaDB/MySQL и SQL;
— понимание сетевой безопасности, firewall и fail2ban;
— опыт работы с Redis;
— понимание настройки Nginx как reverse proxy;
— знакомство с системами мониторинга — Grafana, Prometheus или аналогами;
— самостоятельность, системное мышление и способность самостоятельно находить и устранять технические проблемы.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations:
Austin, Seattle
About the role
We’re looking for a Senior Windows Software Engineer to join our
Zero Trust
team. You will be working on the
Zero Trust desktop client
, which protects corporate devices by securely and privately sending traffic from those devices to Cloudflare’s global network, which can apply advanced web filtering and advanced Zero Trust policies.
What you'll do
In your role, you will predominantly be using
Rust
along platform-native languages & APIs to implement high-performance networking code that runs on multiple desktop platforms. You’ll be expected to
improve the code quality
and to build solid,
testable,
and
well-documented
foundations. You will be most successful in this role if you have a good understanding of
Windows internals
(virtual memory, multi-threading, process lifecycle, kernel programing, system APIs, etc.) and
networking protocols
(TCP/IP, UDP, DNS, QUIC, H/3, proxying, etc.). You will also have to interact with other languages, such as Swift, C#, C, and python.
As a Senior Software Engineer, you will be expected to make significant contributions to the design and implementation of major development projects, working closely with our product managers and other teams to implement customer-impacting features. You will work on stimulating problems born out of the scale of our deployment, and the stringent quality, performance, and security requirements of our product.
Desirable Skills, Knowledge, and Experience:
In-depth knowledge of Windows internals, kernel-mode programming, and network protocols
Experience in low-level Windows driver development, ideally network drivers
Excellent programming skills, with experience writing very high-quality and low-complexity code with thorough documentation.
Strong experience writing easily-testable and thoroughly-tested code (e.g. using dependency injection with the right abstractions)
Great experience using lower-level languages, such as Rust, C, C++
Very comfortable writing multithreaded, asynchronous code
Strong experience with debugging network-related problems
An understanding of how VPN technologies work, and the trade-offs between privacy, security, and anonymity
Good understanding of, and experience with, security protocols and standards
Experience mentoring engineers and raising a team's technical bar through code review and knowledge sharing
Experience owning technical designs end-to-end, writing specs and design docs that coordinate work across engineers and teams
A track record of debugging and resolving complex issues that span team and system boundaries
Empathetic, proactive, and constructive communication skills, verbal and written
Compensation
Compensation may be adjusted depending on work location.
For Seattle-based hires: Estimated annual salary of $185,000 -$254,000
Equity
This role is eligible to participate in Cloudflare’s equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health & Welfare Benefits
Medical/Rx Insurance
Dental Insurance
Vision Insurance
Flexible Spending Accounts
Commuter Spending Accounts
Fertility & Family Forming Benefits
On-demand mental health support and Employee Assistance Program
Global Travel Medical Insurance
Financial Benefits
Short and Long Term Disability Insurance
Life & Accident Insurance
401(k) Retirement Savings Plan
Employee Stock Participation Plan
Time Off
Flexible paid time off covering vacation and sick leave
Leave programs, including parental, pregnancy health, medical, and bereavement leave
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Задачи:
-Анализировать продуктовую и техническую документацию и на основе этого готовить тестовые сценарии для разработчиков под дальнейшую автоматизацию
-Проводить shift-left тестирования
-Анализировать логи в grafana и прочих системах
-Проводить приемочное тестирование
-Заниматься развитием AI-скиллов для Claude
-Оптимизировать и улучшать процессы обеспечения качества в 5 командах
-Работать с автотестами: разбор падений и их правка
Требования:
-Опыт работы на аналогичной должности от 3 лет
-Умение работать с логами
-Навыки кросс-платформенного (web, mobile), API и интеграционного тестирования
-Владение инструментами тестирования (charles proxy, postman или их аналоги)
-Опыт базового использования AI-инструментов в работе (применение агентов и прочее)
-Готовность к работе в нескольких командах и кросс-командному взаимодействию (важно умение общаться и доносить свою точку зрения)
-Опыт улучшения процессов обеспечения качества (флоу работы с задачами, составление инструкций и т.д.)
-Будет плюсом: опыт работы в финтех
-Будет плюсом: опыт работы с автотестами (написание, исправление, анализ падений)
Задачи:
— Разработка и сопровождение CI/CD-процессов в Jenkins и GitLab CI/CD.
— Администрирование и развитие GitLab, GitLab Runner, GitLab Pages, Jenkins, Nexus и HashiCorp Vault.
— Контейнеризация и сопровождение приложений с использованием Docker и Docker Compose.
— Автоматизация развертывания и настройки инфраструктуры с помощью Terraform и Ansible.
— Администрирование Linux-серверов, виртуальной инфраструктуры VMware, платформы наблюдаемости и S3-совместимых хранилищ.
— Сопровождение сборки, развертывания и обновления backend- и frontend-приложений.
— Диагностика инфраструктурных и прикладных проблем, участие в резервном копировании и восстановлении данных.
— Взаимодействие с разработчиками, участие в разборе инцидентов и ведение технической документации.
Требования:
— Опыт работы DevOps-инженером от трёх лет и уверенное администрирование Linux.
— Глубокое знание Docker и Docker Compose: образы, сети, volumes и диагностика контейнеров.
— Практический опыт разработки и сопровождения CI/CD-процессов в Jenkins; опыт работы с GitLab CI/CD будет преимуществом.
— Опыт автоматизации инфраструктуры с использованием Terraform и Ansible.
— Понимание сетевых технологий, протоколов HTTP/HTTPS и TLS, принципов работы reverse proxy и балансировки нагрузки.
— Опыт эксплуатации инфраструктурных сервисов, систем мониторинга и централизованного хранения логов.
— Базовые навыки эксплуатации PostgreSQL, Redis или Elasticsearch/OpenSearch, включая резервное копирование и восстановление данных.
— Навыки автоматизации на Bash и Python, понимание принципов инфраструктурной безопасности.
— Умение взаимодействовать с разработчиками, разбираться в требованиях приложений и документировать технические решения.
Условия:
— Оформление в соответствии с ТК РФ, наличие IT аккредитации Минцифры;
— Конкурентоспособное вознаграждение, годовые бонусы;
— ДМС (со стоматологией) и страхование жизни;
— Индивидуально обсуждаем возможность удаленного формата работы с командировками в Москву 1 раз в месяц;
— Возможности для карьерного роста и профессионального развития;
— Уникальная корпоративная культура, которая поощряет индивидуальные достижения и ценит командную работу;
— Работа в команде профессионалов одного из крупнейших производителей электротехнического оборудования.
Location: United States (Remote); Seattle, Washington; San Francisco, California
Workplace: Remote
ROLE SUMMARY
We’re looking for a Software Engineer II to join Temporal’s Cloud Enablement team and help build and improve the Temporal Proxy. This role will focus on implementing core proxy capabilities and helping consolidate multiple proxy implementations into a single, extensible, open-source, and productized solution used by both customers and Temporal Cloud infrastructure.
Check out our code here https://github.com/temporalio/temporal-proxy!
WHAT YOU'LL DO
- Implement features in a proxy codebase, contributing production-quality code (primarily in Go or a comparable systems language).
- Build and improve core components such as request handling, configuration, authentication/authorization integrations, and encryption-related hooks (as defined by the team’s design).
- Add and maintain observability (logs, metrics, traces) and contribute to debugging issues in staging/production environments.
- Write and maintain tests (unit/integration) to improve correctness, prevent regressions, and support safe iteration.
- Collaborate with engineers across CGS, Security, Infra Foundations, and OSS Server to deliver scoped projects and land changes safely.
- Contribute to developer experience through clear documentation, examples, and small improvements that make the proxy easier to adopt and operate.
WHAT YOU'LL BRING
- Proficiency in Go (preferred) or another systems language, with the ability to ramp quickly into an existing codebase.
- Working knowledge of service-to-service communication and distributed systems basics (e.g., HTTP/gRPC, reliability fundamentals).
- Familiarity with security fundamentals such as mTLS, JWT, and OIDC/OAuth concepts, and willingness to learn deeper patterns as needed.
- Ability to take a scoped problem, implement a solution end-to-end (including testing and documentation), and communicate progress clearly.
- A collaborative mindset and comfort working with teammates across functions to deliver shared outcomes.
NICE TO HAVE
- 3+ years of experience with proxy/gateway systems, cloud networking, service mesh concepts, or security-oriented infrastructure.
- Experience with observability tooling and operational practices (on-call debugging, incident follow-ups, performance testing).
- Contributions to open source (code or documentation).
- Familiarity with Temporal concepts (or strong interest in learning the platform).
Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity.
Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Задачи:
— Полный цикл тестирования веб-приложений (функциональное, интеграционное, регрессионное)
— Тестирование мобильных приложений для iOS и Android (созданных на Flutter)
— Тестирование интеграций между микросервисами и внешними системами
— Анализ логов с помощью Grafana, Kibana
— Работа с базами данных
— Разработка и поддержка тестовой документации (чек-листы, тест-кейсы, тест-планы, TRR)
— Тесное взаимодействие с разработчиками, аналитиками и продуктовой командой для выявления и устранения дефектов
— Улучшение качества продукта и процессов тестирования/разработки
— Соблюдение процессов отдела
Требования:
— Опыт работы QA Engineer от 3 лет
— Практический опыт мобильного тестирования обязателен (Android Studio для отладки и тестирования)
— Опыт тестирования backend обязателен (REST API, Postman/Swagger, клиент-серверная архитектура)
— Понимание и практический опыт Agile методологий
— Глубокие знания тестирования веб и мобильных приложений
— Опыт работы с баг-трекерами и системами управления тестированием
— Опыт работы с реляционными базами данных
— Сильные навыки в процессах тестирования и разработки (планирование, анализ требований, улучшение процессов)
— Опыт написания тестовой документации (чек-листы, тест-кейсы, тест-планы)
— Владение инструментами анализа логов (Grafana, Kibana и др.)
— Самостоятельность и ответственность
— Английский язык на уровне Intermediate и выше (письменно и устно)
Желательно:
— Базовое понимание CI/CD и DevOps инструментов
— Инструменты перехвата трафика (Charles Proxy, Fiddler, Wireshark)
— Автоматизированное тестирование (Selenium, Cypress, Appium)
— Инструменты нагрузочного тестирования (JMeter)
— Базовые знания программирования и желание развиваться в автоматизации тестирования
— Опыт работы в финтехе
Условия:
— Полностью удалённая работа
— Гибкий график
— Конкурентная зарплата (обсуждается индивидуально)
Задачи:
— Функциональное и регрессионное тестирование core-функциональности нативных мобильных приложений на iOS и Android;
— Проверка клиент-серверного взаимодействия с использованием снифферов трафика;
— Тестирование на реальных устройствах, эмуляторах и симуляторах;
— Работа с базами данных: выполнение запросов и проверка корректности данных;
— Запуск и анализ результатов автотестов, разбор причин падений;
— Подготовка тестовой документации, регистрация дефектов и контроль их исправления;
— Участие в релизном процессе: координация проверок, оценка готовности сборки и сопровождение выпуска приложения;
— Взаимодействие с разработчиками, аналитиками и другими участниками продуктовой команды;
— Возможность развиваться в направлении автоматизации тестирования.
Требования:
— Опыт тестирования нативных мобильных приложений на iOS и/или Android;
— Понимание особенностей мобильного тестирования и клиент-серверной архитектуры;
— Опыт проведения функционального, интеграционного и регрессионного тестирования;
— Умение работать со снифферами трафика, например Charles Proxy или Proxyman;
— Опыт работы с эмуляторами и симуляторами;
— Базовое знание SQL и умение проверять данные в базе;
— Понимание жизненного цикла дефекта и процесса выпуска мобильных приложений;
— Умение ясно описывать дефекты, самостоятельно разбираться в проблемах и взаимодействовать с командой;
— Интерес к развитию в направлении AQA будет преимуществом.
Условия:
— Официальное оформление по ТК РФ, стабильную белую заработную плату и премию;
— Классный офис на метро Бутырская, с фруктами и овощами;
— После успешного прохождения испытательного срока: ДМС со стоматологией, "Добросервис" с неограниченной юридической и психологической консультацией, фитнес;
— Возможность работать удаленно, главное — результат;
— Оплату профильных курсов, участия в конференциях;
— Корпоративы на природе и в офисе с настолками, xbox и настольным теннисом, пицца каждую последнюю пятницу месяца;
— Ежедневное погружение в мир книг и неограниченный доступ ко всем электронным и аудиокнигам.
ГибридМосква; мы не ограничиваем себя работой только из офиса,
Задачи:
— Тестировать новые функции и изменения продукта на веб и мобильных приложениях.
— Выполнять функциональное, исследовательское, регрессионное и интеграционное тестирование.
— Писать чёткие, воспроизводимые отчёты об ошибках; проверять исправления и исследовать неожидаемое поведение.
— Создавать и поддерживать тест-кейсы, тест-сценарии и документацию QA.
— Тестировать REST API с использованием инструментов, таких как Postman.
— Использовать инструменты разработчика браузера и сетевые прокси для исследования проблем фронтенда, API и соединения.
— Тестировать на разных браузерах, устройствах, размерах экранов и операционных системах.
— Тестировать на реальных телефонах и планшетах, Android Studio и iOS Simulator.
— Работать с разработчиками и менеджерами продукта для понимания требований и критериев приёмки.
— Участвовать в обсуждениях продукта и QA-ревью для выявления проблем до завершения разработки.
— Постепенно участвовать в автоматизации end-to-end тестов с использованием Playwright и JavaScript или TypeScript.
Требования:
— Практический опыт тестирования ПО — из работы, стажировки, университета или собственных проектов.
— Базовое понимание принципов тестирования и жизненного цикла разработки ПО.
— Структурированный, любознательный подход к исследованию проблем и составлению отчётов об ошибках.
— Коллаборативный настрой и чёткая коммуникация.
— Профессиональный уровень английского языка.
— Желание учиться автоматизации тестирования и современным практикам QA.
Желательно:
— Опыт работы по Agile (Scrum или Kanban).
— Сертификат ISTQB Foundation Level.
— Образование или учёба в области компьютерных наук, инженерии или смежных областях.
— Опыт программирования на SQL, JavaScript, TypeScript, HTML, CSS или Git.
— Опыт с Playwright или аналогичными фреймворками.
— Опыт тестирования мобильных приложений — Android Studio, iOS Simulator.
— Знакомство с Charles Proxy или Proxyman.
Условия:
— Влияние на продукты, используемые на крупных строительных проектах по всему миру.
— Возможность тестировать сложные продукты, объединяющие веб и мобильные приложения, карты, геопространственные данные, изображения с дронов и рабочие процессы на стройках.
— Наставничество от опытных QA, инженеров и продуктовых специалистов.
— Тесное сотрудничество с разработчиками, дизайнерами и менеджерами продукта.
— Чёткий путь развития в API-тестировании, мобильном тестировании, отладке и автоматизации тестирования.
— Гибридный формат работы: 3 дня в офисе, 2 дня удалённо, гибкий график.
— Частное медицинское страхование, карта MultiSport.
— Контракт B2B/UZ с конкурентной ставкой.
Задачи:
— Администрировать продуктивные и тестовые кластеры ClickHouse, контролировать состояние шардов, реплик, Distributed-таблиц и ReplicatedMergeTree-таблиц;
— Диагностировать replication queue, merges, mutations, inserts, деградацию запросов и проблемы с дисковой подсистемой;
— Анализировать системные таблицы ClickHouse и состояние кластера;
— Участвовать в изменении топологии кластера: добавление шардов, реплик, серверов, изменение Distributed-таблиц;
— Планировать горизонтальное масштабирование ClickHouse-кластера;
— Оптимизировать схемы данных, партиционирование, ключи сортировки, TTL, индексы, storage policy и настройки сервера;
— Работать с хранением данных: локальные диски, LUN, DAS, hot / warm storage, S3-совместимое хранилище;
— Прорабатывать дедупликацию данных, повышение уровня сжатия и механизм токенизации / full text search по событиям;
— Настраивать и сопровождать ClickHouse Keeper / ZooKeeper;
— Настраивать TLS/SSL для клиентских подключений и межсерверного взаимодействия;
— Разрабатывать и проверять backup/restore и disaster recovery;
— Настраивать мониторинг, алерты и дашборды по ClickHouse;
— Готовить Ansible playbooks / roles, runbook’и, инструкции, чек-листы и технические отчёты.
— Администрировать продуктивные и тестовые инсталляции MariaDB;
— Контролировать состояние серверов, репликации, соединений, транзакций, блокировок и фоновых процессов;
— Настраивать и сопровождать репликацию: master-slave, master-master, GTID-based replication;
— Диагностировать replication lag, ошибки SQL thread / IO thread, рассинхронизацию данных и конфликты при master-master-схемах;
— Участвовать в миграции MariaDB с master-master-репликации на Galera Cluster;
— Настраивать, сопровождать и диагностировать Galera Cluster;
— Прорабатывать HA-архитектуру MariaDB: failover, fencing, VIP / proxy layer, split-brain-риски;
— Разрабатывать и проверять disaster recovery-сценарии, RPO / RTO и восстановимость резервных копий;
— Анализировать производительность: slow queries, EXPLAIN, индексы, locks, deadlocks, buffer pool, connection pool, disk IO;
— Оптимизировать конфигурацию MariaDB с учётом нагрузки, объёма данных, RAM, CPU, дисковой подсистемы и сети;
— Настраивать TLS/SSL для клиентских подключений и репликации;
— Настраивать мониторинг, алерты, дашборды и runbook’и по MariaDB.
— Участвовать в расследовании production-инцидентов, связанных с ClickHouse, MariaDB, Linux, сетью или дисковой подсистемой;
— Анализировать метрики, логи, системные таблицы, состояние репликации, блокировки, диски, сеть и конфигурации;
— Формулировать технические гипотезы, проверять их и отделять первопричину от сопутствующих факторов;
— Готовить технические выводы по итогам инцидентов и участвовать в postmortem-разборах;
— Разворачивать тестовые стенды ClickHouse и MariaDB для проверки архитектурных решений;
— Проверять обновления, изменение топологии, расширение хранилища, storage policy и параметры ClickHouse / MariaDB до применения в production;
— Автоматизировать типовые операции через Ansible / Bash / Python / Terraform или аналогичные инструменты;
— Взаимодействовать с заказчиками, объяснять технические риски понятным языком, предлагать решения и лидировать технические обсуждения.
Требования:
— Практический опыт промышленной эксплуатации ClickHouse;
— Понимание архитектуры ClickHouse: shards, replicas, Distributed tables, ReplicatedMergeTree, MergeTree family;
— Опыт диагностики replication queue, merges, mutations, insert/select latency, деградации запросов и проблем с дисковой подсистемой;
— Понимание партиционирования, ключей сортировки, TTL, storage policies, disks, volumes, data skipping indexes;
— Опыт изменения топологии ClickHouse-кластера или глубокое понимание порядка и рисков таких изменений;
— Опыт настройки TLS/SSL для ClickHouse;
— Опыт эксплуатации MariaDB в продуктивной или близкой к продуктивной среде;
— Понимание MariaDB, InnoDB, транзакций, индексов, блокировок, deadlocks, isolation levels;
— Опыт настройки и диагностики репликации MariaDB;
— Понимание GTID, binary logs, relay logs, replication lag, failover и рисков master-master-репликации;
— Опыт настройки backup/restore MariaDB и проверки восстановимости резервных копий;
— Опыт диагностики производительности MariaDB: slow query log, EXPLAIN, индексы, locks, buffer pool, disk IO;
— Опыт эксплуатации Linux-серверов;
— Понимание влияния CPU, RAM, disk IO, network и filesystem на работу ClickHouse и MariaDB;
— Опыт настройки мониторинга и алертов для ClickHouse, MariaDB и инфраструктуры;
— Опыт работы с Prometheus, Grafana, Zabbix или аналогичными системами мониторинга;
— Опыт автоматизации через Ansible, Bash, Python или аналогичные инструменты;
— Умение аккуратно проводить изменения в production: план работ, оценка рисков, rollback-план, проверка результата;
— Умение писать техническую документацию: инструкции, runbook’и, чек-листы, postmortem-отчёты.
Желательные требования:
— Опыт или уверенное понимание Galera Cluster;
— Опыт эксплуатации ClickHouse и MariaDB в составе SIEM, SOC, log management, observability, telemetry или других высоконагруженных систем;
— Опыт работы с большими объёмами данных: десятки или сотни ТБ;
— Опыт работы с ClickHouse Keeper или ZooKeeper;
— Опыт эксплуатации ClickHouse / MariaDB на bare metal;
— Опыт работы с LUN, DAS, локальными дисковыми массивами и S3-совместимыми объектными хранилищами;
— Опыт нагрузочного тестирования ClickHouse и MariaDB;
— Опыт построения процедур disaster recovery;
— Опыт подготовки архитектурных и эксплуатационных документов для заказчиков;
— Опыт работы с ProxySQL, MaxScale, HAProxy, Keepalived, Pacemaker / Corosync или аналогичными решениями;
— Опыт проведения регламентных работ с минимальным downtime;
— Опыт аудита продуктивных инсталляций у заказчиков.
Условия:
— Постоянная занятость;
— Работа с продуктивной, тестовой и лабораторной инфраструктурой;
— Взаимодействие с командой эксплуатации, инженерами SIEM, разработчиками, архитекторами и техническими представителями заказчика;
— Участие в планировании изменений, разборе инцидентов и развитии архитектуры хранения данных.
Автоотклики