Вакансии

Building and improving identity and access management, secrets management, and secure infrastructure access. Strengthening Linux and cloud security, VPNs, and SSL/TLS certificate management.

• Проектировать, масштабировать и автоматизировать среды (Prod/Stage/Test) через IaC (Terraform, Ansible); • Развивать и поддерживать кластеры Kubernetes и Docker;

Проектирование архитектурных решений для корпоративных систем и ключевых бизнес-процессов. Разработка и согласование интеграционных решений между внутренними и внешними системами.

Внедрение программных продуктов ГК Astra в инфраструктуры Заказчиков, с использованием подхода Infrastructure as Code; Опыт работы и администрирования Linux;

Location: Bulgaria Company Background Our client is a travel technology company developing cloud-native, AI-powered software for airlines and hospitality brands. Its products help customers improve commercial performance, reduce costs, and evolve their digital commerce capabilities. The company’s technology is designed to work alongside existing airline systems, allowing customers to introduce new capabilities without replacing their current technology landscape. Project Description You will contribute to a large-scale greenfield travel-technology initiative supporting the launch of a new airline operation. The project uses a modern commercial platform to enable flexible retailing, pricing, and digital shopping experiences across travel products and ancillary services. Technologies GCP, AWS Wiz Cloudflare WAF, Bot Management, DNS, TLS, DDoS Protection and Rate Limiting Terraform SonarCloud and Dependabot Jira, PagerDuty and Slack Python and Bash What You'll Do Own and continuously improve cloud security posture across GCP organizations and AWS accounts, including connector coverage, runtime sensor deployment on production clusters, custom policy development, finding-triage baselines, and integrations with Jira, PagerDuty, and Slack; Operate and evolve the edge security layer, centralizing internet-facing protection through Cloudflare WAF, bot management, rate limiting, DNS/TLS, and origin routing for customer-facing production zones; Tune security rules using real production traffic, manage allow-list requests, and enable other teams to use edge-security tooling effectively; Support and automate vulnerability management and secure configuration, maintaining the intake of Wiz, SAST, penetration-test, and customer-reported findings, defining remediation baselines, and driving owners to closure; Participate in security incident response for cloud events, including DDoS and bot attacks, supply-chain alerts, credential exposure, and data-handling incidents, while creating and maintaining detection, triage, and mitigation runbooks; Help secure the software supply chain by owning SAST reporting in SonarCloud, dependency scanning with Dependabot, container base-image hardening, and the selection of SBOM and SCA tooling, and publish release-level security reports for engineering teams; Produce technical evidence for SOC 2, PCI DSS, ISO 27001, and NIS2, including evidence of log-sink configuration and retention, access reviews, authenticated scanning, and IAM remediation, and map Wiz controls to relevant frameworks to make evidence collection repeatable; Enable security self-service by training Platform, CloudOps, and Product Engineering teams on the tools they use, including Wiz and Cloudflare administration, mapping service catalogues to owners, and automating recurring customer-security and issue-triage reporting through scripting and AI-assisted workflows; Advise and partner with engineering teams on the security of new platform integrations and AI/RAG services, contributing to the annual cloud-security roadmap and target-state architecture; Job Requirements 5+ years of experience in cloud security or platform engineering with a security focus, including hands-on experience with GCP or AWS across IAM, audit logging, log routing, network security, and workload protection; Production experience with a CNAPP/CSPM platform, such as Wiz (preferably) / Prisma Cloud / Orca / Google Security Command Center, including policy authoring, integrations, and runtime protection; Hands-on administration of a WAF, CDN, and bot-management stack at scale; Strong Terraform experience, including building modules for security tooling and WAF configuration, reviewing changes, and managing configuration drift and legacy infrastructure; Experience with vulnerability management across cloud infrastructure, containers, and code, including SAST, SCA/dependency scanning, container image hardening, and penetration-test remediation tracking; Experience routing cloud security signals to a SIEM or security-monitoring platform, such as Wazuh, Microsoft Sentinel, Google Security Operations, or Datadog Security Monitoring, and integrating actionable alerts with PagerDuty and Slack; Scripting skills in Python or Bash for automation and security reporting; Security incident-response experience in a production environment, including developing runbooks and managing vendor escalations; Clear written and verbal communication skills, with the ability to train engineering teams and document security decisions; Nice To Have Experience automating security workflows, such as report generation and issue triage, with AI-assisted or LLM-based tooling; Experience working across both GCP and AWS, experience with Azure; Familiarity with Rego, OPA, or other policy-as-code languages; Experience with identity and access-management tooling, including Okta SSO/SCIM, PAM solutions, and least-privilege reviews for cloud IAM; Experience facilitating OWASP SAMM assessments, threat-modelling sessions, or security-champions programs; Airline or travel-industry experience, including PCI-scoped payment flows, partner integrations, and customer-facing security reporting; Experience supporting compliance with PCI DSS, SOC 2, ISO 27001, or NIS2; Certifications such as Google Professional Cloud Security Engineer, CCSP, or AWS Certified Security – Specialty; What Do We Offer The global benefits package includes: Technical and non-technical training for professional and personal growth; Internal conferences and meetups to learn from industry experts; Support and mentorship from an experienced employee to help you professional grow and development; Health insurance; Sports activities to promote a healthy lifestyle; Flexible work options, including remote and hybrid opportunities; Referral program for bringing in new talent; Work anniversary program and additional vacation days.

Location: Москва Команда занимается сбором качественных данных, которые принципиально важны для обучения передовых моделей ИИ. Обязанности * Определять техническую стратегию и целевую архитектуру системы. * Проектировать системы, готовые к масштабированию от миллионов до миллиардов сущностей: горизонтальное масштабирование, шардирование, геораспределение. * Принимать ключевые технологические решения: выбор стека, стратегии хранения, архитектурные паттерны (event-driven, CQRS и др.). * Проектировать end-to-end пайплайны: URL discovery → fetch → parse → deduplicate → store → deliver. * Писать код самых сложных и критичных компонентов: планировщик обхода, URL-фронтир, дедупликация, проводить performance engineering: профилирование, нагрузочное тестирование, устранение bottleneck-ов. * Оптимизировать прокси-инфраструктуру и маршрутизацию трафика на глобальном уровне, исследовать и внедрять новые технологии: HTTP/3, QUIC, eBPF, io\_uring для максимизации throughput, разрабатывать стратегии оптимизации стоимости инфраструктуры (FinOps). * Руководить командой из 3–6 инженеров: планирование, декомпозиция, приоритизация, формировать и поддерживать технические стандарты: Code Review, coding guidelines, архитектурные ADR, менторить разработчиков, проводить 1-1, помогать в профессиональном развитии, взаимодействовать с потребителями данных и смежными командами для планирования roadmap. Требования * **Знание Python и Go.** * Коммерческий опыт разработки на Python и Go от 7 лет, из них не менее 2 лет в роли техлида/тимлида. * Экспертиза в проектировании распределённых высоконагруженных систем (миллионы RPS, петабайты данных). * Глубокое понимание сетевого стека: TCP/UDP, HTTP/1.1/2/3, TLS, DNS, QUIC. * Практический опыт построения масштабных систем краулинга или аналогичных data acquisition систем. * Экспертиза в асинхронном и параллельном программировании. * Опыт проектирования микросервисной и event-driven архитектуры. * Опыт работы с Kafka, Redis, PostgreSQL, ClickHouse (или аналогами). * Уверенное владение Kubernetes, Docker, Terraform, CI/CD. * Опыт работы с облачными платформами. * Навыки глубокого troubleshooting: tcpdump, strace, perf, eBPF-инструменты. * Опыт управления командой: планирование, Code Review, менторинг, 1-1, найм. Будет плюсом ------------ * Знание Rust или C++ для написания высокопроизводительных компонентов. * Опыт работы в компаниях с масштабным краулингом (поисковые системы, data aggregators). * Опыт работы с io\_uring, eBPF, zero-copy networking. * Опыт построения геораспределённых систем. * Опыт применения ML для оптимизации crawl-стратегий (приоритизация, фильтрация, классификация). * Публичные выступления, статьи. Условия * Крупнейшее DS\\&AI community — более 600 DS-специалистов банка. * Дайджест о самых последних разработках в области DS\\&AI и отчеты с крупнейших конференций мира. * Возможность быть соавтором НИРов и статей для международных конференций. * Возможность выбрать удобный формат работы: гибрид или офис. * Ежегодный пересмотр зарплаты, годовая премия. * Корпоративный спортзал и зоны отдыха. * Более 400 образовательных программ СберУниверситета для профессионального и карьерного развития. * Расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа. * Бесплатная подписка СберПрайм, скидки на продукты компаний-партнеров. * Вознаграждение за рекомендацию друзей в команду Сбера.

🔹 Design and build scalable, reliable backend services. 🔹 Drive architecture and technical research.

As a Senior Software Engineer on the Infrastructure Platform team, you will work across a broad technical footprint, including AWS infrastructure, Kubernetes, distributed systems, observability, deployment tooling, and internal developer platforms. Design, build, and operate AWS-based cloud infrastructure and platform services.

• Сопровождение и эксплуатация Data Lake платформ; • Поддержка S3/Object Storage инфраструктуры;

Location: Bangalore, India GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role We're looking for an Intermediate Site Reliability Engineer to join the Cells Infrastructure team in GitLab's Scale & Architecture organization. In this role, you'll help build and operate Cells, the architecture that lets GitLab.com scale horizontally. Cells splits GitLab.com into many independent units, each with its own application and data stack, behind a shared routing layer. This is a build-it-and-run-it role. You'll provision cells, route traffic to them, deploy them safely, and keep them reliable in production. You'll also help move customer organizations onto Cells, one of GitLab's most important scaling initiatives. What you'll do Operate Cells in production: join the on-call rotation, respond to incidents, lead post-incident reviews, and drive corrective actions to completion. Define and monitor service level objectives (SLOs) for routing and cell health, and build the dashboards, alerts, and runbooks behind them. Provision and operate cell infrastructure on Amazon Web Services (AWS) and Google Cloud Platform (GCP), including Kubernetes, networking, Identity and Access Management (IAM), PostgreSQL, Redis, and object storage. Develop infrastructure as code with Terraform, Helm, and GitOps tooling such as Argo CD. Operate and extend the global routing layer, built on Cloudflare Workers, Envoy, and a Go service backed by Cloud Spanner, and expand routing to more protocols and services. Improve the continuous integration and continuous delivery (CI/CD) pipelines behind ring-based deployments, covering promotion, database migrations, quality assurance validation, and rollback. Support organization migrations by preparing destination cells and helping with dry runs and production cutovers. Work with product teams to make their services cell-compatible, and write documentation so others can operate Cells with confidence. Take part in on-call or operational support where your team’s ownership model requires it. What you'll bring Professional experience running production infrastructure at scale on AWS, GCP, or both, including Kubernetes, along with strong Terraform and Helm skills. Proficiency in Go, or strong experience in another systems language and willingness to work in Go daily. Solid grounding in site reliability engineering (SRE) best practices: SLOs and error budgets, blameless post-incident reviews, reducing toil through automation, capacity planning, and designing for graceful degradation. Experience owning services in production, including on-call, incident response, and monitoring with tools such as Prometheus and Grafana. Practical knowledge of progressive delivery: how to roll changes safely across a fleet and how to roll them back. A strong understanding of distributed-systems fundamentals, such as request routing, proxies, consistency, and failure domains. Experience working effectively in distributed, all-remote teams: you default to asynchronous, written-first communication, document decisions in issues and merge requests, hand off work cleanly across time zones, and stay transparent about progress and blockers. Experience with Cloudflare, Spanner, Argo CD, TypeScript, or operating GitLab at scale is a plus, not a requirement. About the team Every team in our organization owns its services end to end, from design through on-call.We own the control plane that tracks cells and decides where each request belongs, and keep the fleet in step with GitLab's release cadence.We work closely with delivery, database, migration, and product teams across GitLab. Feature teams own how their services behave on the platform; we own the underlying infrastructure.We're an all-remote, asynchronous team. We make decisions in GitLab issues, use directly responsible individuals (DRIs) to own technical direction, demo our work weekly, and use AI-assisted workflows every day. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Задачи: — Поддержка и развитие CI/CD пайплайнов (GitLab CI - основной, Jenkins) — Миграция и деплой приложений в Kubernetes — Контейнеризация приложений, оптимизация образов — Сборка on-premise продукта, поддержка и развитие инсталлятора — Дежурство в паре с Senior L2: приём и обработка инцидентов — Обслуживание стендов разработки и тестирования — Работа с мониторингом: настройка алертов и дашбордов — Участие в спринтах команды (проектные задачи от сеньоров) — Прямое взаимодействие с командами разработки по запросам Требования: — Kubernetes: деплой, отладка, базовое администрирование кластеров (понимание networking, storage, обновления) — CI/CD: опыт написания и поддержки пайплайнов (GitLab CI обязательно, Jenkins - плюс) — Linux: уверенное администрирование (CentOS/RHEL, Debian, Astra Linux, ALT Linux, RedOS) — Контейнеризация: Docker, Podman, containerd, понимание работы контейнеров, образов, реестров (docker registry) — Helm: опыт работы с чартами (использование, модификация, понимание шаблонизации) — Ansible: опыт написания и поддержки плейбуков — Мониторинг: Prometheus + Grafana (настройка и использование) — ИБ: базовые принципы информационной безопасности, понимание устройства и работы средств защиты — Git: уверенная работа, code review, branching strategies — Опыт работы от 2 лет в DevOps / SRE / системном администрировании (рассмотрим кандидатов с меньшим опытом при сильных технических навыках) — Коммуникабельность: прямая работа с разработчиками Будет плюсом: — Kubernetes: глубокие знания (сети, хранилища, troubleshooting на уровне etcd/kubelet) — Helm: написание чартов с нуля — Terraform: опыт написания модулей (провижининг VM) — VMware ESXi: базовое понимание виртуализации — Опыт сборки on-premise продуктов / инсталляторов — Node.js, Rust: чтение кода, опыт настройки пайплайнов сборки для этих стеков — npm registry, артифакт-менеджмент — Опыт работы с on-premise инфраструктурой (не только облака) — Сетевые технологии (CNI, Load Balancers) — Сертификации: CKA, CKAD, RHCSA Условия: — Работа в удаленном или гибридном формате в комфортабельном офисе класса «А» в двух шагах от ст. м. Римская/Площадь Ильича — Достойная оплата труда, соответствующая профессиональному уровню и компетенциям — Статус аккредитованной ИТ-компании со всеми преимуществами — ДМС со стоматологией и госпитализацией по всей России, страхование от несчастного случая, полис ВЗР для поездок за границу, ветеринарная поддержка — 100% компенсацию больничного, +10 дополнительных дней в году на отгул по болезни — Регулярный обмен обратной связью по системе полугодового Performance Review — Возможности для обучения и профессионального развития: корпоративную библиотеку, менторство, внутренние митапы по обмену опытом, практику публичных выступлений, возможность участвовать в создании контента для профессиональных сообществ — Программу корпоративных скидок и привилегий — Развитую корпоративную культуру: открытую коммуникацию, онлайн и офлайн встречи, клубы по интересам, спортивные активности и поддержку инициатив сотрудников.

Задачи: — Проектировать и разворачивать инфраструктуру с нуля. — Настраивать CI/CD пайплайны для фронта и бэка. — Поднимать и сопровождать кластер Docker Swarm и выстраивать процессы деплоя. — После переезда спроектировать и провести миграцию на Kubernetes. — Администрировать кластер Percona XtraDB Cluster (отказоустойчивость, бэкапы, восстановление). — Настраивать мониторинг, алертинг и логирование. — Работать в связке с командами разработки. — Участвовать в технических переговорах с подрядчиками. Требования: — Опыт коммерческой работы в DevOps или SRE от 5-ти лет. — Реальный опыт проектирования инфраструктуры с нуля, а не только поддержка существующей. — Опыт работы с Docker Swarm в продакшне. — Уверенное знание Kubernetes в продакшне. — Опыт настройки GitLab CI/CD с раннерами и пайплайнами. — Понимание сетевой модели и проксирования через Nginx. — Опыт эксплуатации Percona XtraDB Cluster/Galera в продакшне (кворум и split-brain, SST/IST, bootstrap кластера после падения, бэкапы через Percona XtraBackup). — Опыт работы с Zabbix. — Опыт с отечественными облачными провайдерами (Yandex Cloud). — Знание IaC-инструментов (Terraform, Ansible). Условия: — Удаленная работа или возможность работать как в офисе клиента, так и в офисе SkillStaff в центре Москвы на Воздвиженке. — Белая зарплата и удобный график работы. — Возможность выбора проектов для профессионального роста. — Обмен опытом и получение знаний через участие в разных проектах и совместную работу с коллегами.

Location: Remote, Canada; Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Cloud Platform Engineer An overview of this role As a Cloud Platform Engineer on the Runway team, you'll help design, build, and maintain the infrastructure and developer tooling that powers our engineering organization. You'll advance our Kubernetes-based platform, mature our GitOps practices, and expand infrastructure as code adoption across the business. This hands-on role brings together infrastructure, automation, and developer experience, helping application teams deploy and operate their services. What you’ll do Operate and improve production Kubernetes clusters across cloud environments, managing upgrades, scaling, and reliability throughout the cluster lifecycle. Own and extend Argo CD-based GitOps workflows, maintaining ApplicationSets, managing sync policies, and enforcing deployment standards across environments. Write, review, and maintain reusable Terraform modules, with clear practices for state management and drift detection. Monitor platform health, respond to incidents, conduct post-mortems, and improve availability, performance, and observability. Collaborate with application teams to onboard services, and create documentation, runbooks, and self-service tooling that improves developer productivity. Implement role-based access control, network policies, and secrets management to meet infrastructure security and compliance requirements. Integrate platform capabilities with continuous integration and continuous delivery (CI/CD) pipelines to support end-to-end delivery workflows. Take part in on-call or operational support where your team’s ownership model requires it. What you’ll bring Experience operating Kubernetes in production and working with at least one major cloud provider: Amazon Web Services, Google Cloud, or Microsoft Azure. Experience with Argo CD or comparable GitOps tooling, such as Flux. Proficiency in Terraform for cloud infrastructure provisioning, including remote state, workspaces, and module design. Ability to write scripts and automation in Python, Bash, or Go. Familiarity with Helm for Kubernetes package management. Understanding of networking fundamentals, including the Domain Name System (DNS), load balancing, ingress, and service mesh concepts. Clear written and verbal communication, with the ability to document systems and collaborate across teams. Optional: experience with managed, multi-cluster, or multi-region Kubernetes, service meshes, policy as code, observability, or Kubernetes-native infrastructure as code; open source or platform tooling contributions; or relevant certifications. About the team The Runway team builds and maintains infrastructure and developer tooling for GitLab's engineering organization. Its work centers on a Kubernetes-based platform, GitOps delivery practices, and infrastructure as code. The team collaborates with application teams to onboard services and improve developer productivity through documentation, runbooks, and self-service tooling. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $115,000 — $194,000 USD How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Требования: — 5+ лет разработки на Ruby on Rails в продакшене — Опыт проектирования и масштабирования бэкенд-систем — Знание баз данных и оптимизации запросов — Опыт с облачной инфраструктурой и Terraform или другими IaC-инструментами Важно: — Не менее 4 рабочих часов пересечения с командой в Тайбэе (GMT+8) О компании: Международный дейтинг-продукт с большой аудиторией.

Location: Remote, Global About the Role We're looking for a FinOps Data Engineer to help drive cost optimization and cloud financial governance across our AWS infrastructure and GCP footprint. You'll work cross-functionally with Engineering, Finance, and Product to find and ship savings, build the tooling necessary to maximize efficiency of every dollar spent in the cloud, and cultivate a culture of cost awareness across engineering teams. This role owns the data side of that mission: the models, pipelines, and analysis that make cost, usage, and margin numbers trustworthy across the company. This is a hands-on engineering role, not an analyst seat. You'll do the schlep work other teams don't have time for, digging into a bucket's access pattern, writing the dbt model or Python pipeline that ships the fix, building the cost-vs-revenue mart that answers a margin question once instead of every time, and chasing a number until it reconciles. Strong communication matters as much as technical depth, you'll regularly explain a savings case or a data model's implications to an engineering team, a finance stakeholder, and a leadership audience in the same week. What You'll Be Responsible For In this role, you'll: - Find and ship savings across AWS and GCP: Analyze billing, usage, and cost trends to identify opportunities, rightsizing, storage lifecycle policies, data transfer, and spot/auto-scaling. Take ideas from identification through to a realized dollar figure, not just a recommendation. - Build and maintain the FinOps data pipeline: Design and run the BigQuery/dbt models that turn raw billing and usage data (CUR, Storage Lens) into reconciled, trustworthy mart tables, the foundation everything else in FinOps is built on. - Build cost-vs-revenue and customer segmentation models: Model unit economics and margin by product line and customer segment, and extend coverage as new products and segments come online. - Apply data science to cost and usage data: Build forecasting models, detect anomalies statistically rather than by threshold alone, and quantify savings opportunities (e.g. storage lifecycle, request-cost patterns) with rigor a spreadsheet can't match. - Build and maintain cost attribution: Tagging policies, cost allocation, and chargeback/showback so engineering teams can see and own their own spend. This is foundational work other savings work depends on. - Automate cost governance: Build automated cost reporting, anomaly detection, and alerting. Write the scripts and infrastructure-as-code (Python, Terraform, Lambda) that enforce cost policy rather than relying on manual review. - Partner with engineering on architecture decisions: Bring cost into the room early, cost-efficiencies are cheaper to get right at design than to retrofit. - Work with Finance on forecasting and reporting: Support budget tracking and financial KPIs; build dashboards and self-serve analytics engineering and finance can both read. You Might Be a Good Fit If You - Have strong AWS expertise and working GCP knowledge, including pricing models, billing structures, and cost optimization mechanics. - Have data engineering depth: dbt, BigQuery (or an equivalent modern warehouse), SQL at scale, and data modeling for analytics (dimensional modeling, incremental models, testing). - Have data science fundamentals: statistical forecasting, anomaly detection, and experimentation, and know when a rigorous model beats a rule of thumb. - Have automation and scripting skills: Python, Terraform/ pulumi, Lambda, or Bash. - Are comfortable with cost/billing tooling: AWS Cost Explorer, Cost & Usage Reports, GCP Billing Reports, and BI/dashboarding (we use Hex). - Have experience with, or are comfortable picking up, Linear and Notion as the system of record for tracking and documenting FinOps work. - Experience with a dedicated cloud cost management platform (e.g. CloudZero, Vantage, or similar) is a plus, not required. - Can analyze cost data and present it clearly to both technical and non-technical audiences. - Have prior experience spanning data analytics, data engineering, or data science in a FinOps, cloud cost management, or cloud governance context. - Are energized by doing the unglamorous, high-leverage work (the schlep) that unblocks other teams, and by working cross-functionally without positional authority. WHAT WE OFFER - Fully Remote We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world. - ESOP Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. - Tech Allowance Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. - Health Benefits Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. - Annual Off-Sites Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. - Flexible Work We operate asynchronously and trust you to manage your own time. You know what needs to be done and when. - Professional Development Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. ABOUT THE TEAM Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love. - ~400 team members - 60+ countries - 20+ languages spoken - Over $1B raised (including our $500M Series F) - 540,000+ community members We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.

Location: Europe We are toogeza, a Ukrainian recruiting company that is focused on hiring talents and building teams for tech startups worldwide. Currently, we are looking for a IT Infrastructure & Operations Engineer (SysOps) for Roosh https://www.roosh.tech. Location: EU Work Model: Remote About our client Roosh Investment Group scales remarkable businesses globally. We're a dedicated team of investors, entrepreneurs and operators. With over 10 years of expertise, we act as partners in growing businesses rather than mere financial backers. ABOUT THE ROLE We are looking for an experienced, hands-on Senior IT Infrastructure & Operations Engineer to take end-to-end ownership of our infrastructure operations. You will be the primary technical owner responsible for the stability, availability, security, performance, and recoverability of our business-critical IT infrastructure. This is a highly autonomous role. We expect you to independently manage daily infrastructure operations, resolve complex technical issues, plan and execute changes, identify operational risks, and continuously improve infrastructure reliability. You will report to the Head of IT, who will provide strategic direction, architectural oversight, and approval for major infrastructure decisions. We value sound engineering judgment, transparency, accountability, and operational discipline just as much as technical expertise. Key Responsibilities Infrastructure Ownership & Operations - Take end-to-end technical ownership of infrastructure operations, including physical servers, virtualization platforms, operating systems, networking, and supporting services. - Independently maintain, troubleshoot, and improve Windows Server and Linux environments. - Administer virtualization platforms, including Proxmox, VMware, or equivalent technologies. - Manage infrastructure capacity, performance, lifecycle, and operational health. - Identify and proactively address single points of failure, configuration weaknesses, technical debt, and operational risks. - Coordinate infrastructure maintenance activities with minimal business disruption. - Work with external vendors and service providers when necessary. Reliability, Backup & Disaster Recovery - Own the technical operation and reliability of backup and recovery solutions. - Monitor backup execution, retention, integrity, and storage capacity. - Perform scheduled recovery tests and maintain validated restoration procedures. - Maintain and execute disaster recovery procedures aligned with defined RTO and RPO requirements. - Assess infrastructure resilience and recommend improvements to availability and business continuity. - Ensure critical services can be recovered using documented and tested procedures. Network & Security Operations - Administer networking infrastructure, including MikroTik, HPE Aruba, switches, firewalls, VPNs, Wi-Fi, and network segmentation. - Troubleshoot routing, DNS, DHCP, connectivity, and network performance issues. - Maintain secure administrative access, network configurations, and infrastructure access controls. - Implement security hardening, operating system updates, and vulnerability remediation in collaboration with the Information Security team. - Apply least-privilege principles and follow privileged-access management requirements. - Support security investigations and remediation of infrastructure-related findings. Incident, Problem & Change Management - Take technical leadership during infrastructure incidents, including critical service disruptions. - Independently diagnose incidents, restore services, coordinate resolution activities, and communicate operational status. - Perform root cause analysis and implement corrective and preventive actions. - Plan and execute infrastructure changes using impact assessments, testing, maintenance windows, and rollback procedures. - Independently execute pre-approved standard changes within agreed operational boundaries. - Escalate high-risk, architectural, or business-impacting changes for approval. - Maintain accurate change records, incident reports, and post-incident documentation. Monitoring, Automation & Continuous Improvement - Own infrastructure monitoring, alerting, and operational visibility. - Ensure critical systems and services are appropriately monitored and actionable alerts are configured. - Develop scripts and automation to reduce manual tasks and operational errors. - Improve infrastructure standardization, configuration consistency, and maintenance processes. - Recommend technical improvements based on evidence, operational metrics, and business requirements. - Maintain infrastructure documentation, diagrams, inventories, and operational runbooks. Collaboration & Technical Decision-Making - Act as the primary technical point of contact for infrastructure-related matters. - Independently make day-to-day operational decisions within established policies and architectural guidelines. - Collaborate with IT Support, Information Security, and Digital Transformation teams. - Provide technical recommendations, risk assessments, and implementation options to the Head of IT. - Communicate infrastructure risks, critical incidents, and significant technical decisions transparently. - Ensure sufficient documentation and knowledge transfer to support operational continuity. Must-Have Experience Infrastructure & Systems - Strong hands-on experience managing production or business-critical infrastructure. - Advanced administration of Windows Server and Linux systems. - Solid experience with enterprise virtualization platforms such as Proxmox, VMware vSphere, or OpenStack. - Understanding of virtualization clusters, storage, resource allocation, networking, and high-availability concepts. - Proven experience implementing and maintaining backup and disaster recovery solutions. - Practical experience restoring systems and troubleshooting infrastructure failures. Networking & Security - Strong networking knowledge: TCP/IP, routing, VLANs, DNS, DHCP, NAT, VPNs, and firewalls. - Practical experience with enterprise networking equipment, preferably MikroTik or HPE Aruba. - Understanding of network segmentation, infrastructure hardening, secure administration, and access control. - Experience managing patching and vulnerability remediation. Monitoring & Automation - Experience with infrastructure monitoring solutions such as Zabbix, Prometheus, or equivalent. - Ability to automate operational tasks using PowerShell or Bash. - Ability to troubleshoot complex technical problems across infrastructure layers. IT Operations & Service Management - Experience handling infrastructure incidents and performing root cause analysis. - Practical knowledge of change management, maintenance planning, rollback procedures, and risk assessments. - Experience with ITSM/ticketing solutions such as Jira Service Management or equivalent. - Ability to produce clear technical documentation, architecture diagrams, runbooks, and recovery procedures. Nice to Have - Proxmox VE, Proxmox Backup Server, and cluster administration. - Veeam Backup & Replication. - Palo Alto Networks and Cortex products. - HPE Aruba and MikroTik advanced administration. - Microsoft Entra ID, Active Directory, and Google Workspace administration. - Experience with Docker and containerized environments. - Experience with Ansible, Terraform, or other infrastructure automation tools. - Familiarity with Git and version-controlled infrastructure configurations. - Experience with MDM or endpoint management solutions. - Experience operating remote desktop or virtual desktop infrastructure. - Knowledge of ITIL practices and infrastructure service management. The Person We're Looking For Independent & Accountable You can take ownership of infrastructure operations without requiring constant supervision. You understand your responsibilities, make informed decisions, and follow tasks through to completion. Risk-Aware & Disciplined You never treat production systems as a testing environment. You evaluate dependencies, understand potential consequences, verify backups, and prepare rollback options before making changes. Methodical Problem Solver You troubleshoot systematically, challenge assumptions, work from evidence, and focus on root causes rather than temporary fixes. Transparent & Trustworthy You communicate incidents, mistakes, uncertainties, and risks openly and promptly. You know when to make an independent decision and when escalation is necessary. Proactive & Improvement-Oriented You anticipate infrastructure issues, identify areas for improvement, and continuously look for ways to increase reliability, security, and operational efficiency. Collaborative & Pragmatic You communicate clearly with technical and non-technical colleagues, share knowledge, and prioritize solutions that serve real business needs. Calm Under Pressure You maintain a structured approach during incidents, prioritize service restoration, and make reasoned decisions without unnecessary risk-taking. What Success Looks Like - Infrastructure operations run reliably without requiring continuous involvement from the Head of IT. - Critical systems are actively monitored, maintained, and recoverable. - Infrastructure incidents are handled efficiently and transparently. - Production changes are executed in a controlled and predictable manner. - Backup restoration and disaster recovery procedures are regularly tested. - Operational risks, recurring incidents, and technical debt are systematically reduced. - Infrastructure documentation remains accurate, complete, and usable. - The Head of IT can focus on strategy, architecture, and business priorities while confidently delegating day-to-day infrastructure operations. What’s next? If this role sounds like a fit — we’d love to hear from you! Just send over your CV and anything else you’d like us to consider. We’ll review everything within five working days, and if your background matches what we’re looking for, we’ll get in touch to set up a call and get to know each other better.

Location: Limassol, Cyprus Workplace: on-site Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement. We are building the future of live entertainment. We believe that by providing people with the best and high-quality live streaming experience in entertainment, we can tackle the world’s “problems” better, together! We're looking for a DevSecOps specialist to join our team and collaborate on continuously evolving our security architecture. You'll work closely with engineering and operations to strengthen our end-to-end security posture—protecting infrastructure, applications, and data — while enabling fast, reliable delivery. Job Responsibilities Responsible for the developing and maintaining the organization’s security architecture design to ensure the protection of IT systems, endpoint devices, network infrastructure, and information assets. Security initiatives to assess and mitigate risks, ensuring alignment with business objectives and compliance with regulatory requirements. Collaborate with IT and business units to integrate security practices into the development and deployment of IT systems and applications. Conduct research on emerging security technologies and trends to enhance the organization’s security posture. You’ll thrive here if you have Proficiency in Ansible and Terraform for Infrastructure as Code (IaC). Solid knowledge of cloud security frameworks. Knowledge of threat intelligence platforms and techniques for monitoring and responding to potential security breaches. Proficiency in encryption technologies, PKI, and cryptographic protocols (SSL/TLS, IPSec). Understanding of network security, including firewalls, VPNs, IDS/IPS, and endpoint security solutions. Understanding of identity and access management (IAM) solutions, including SSO, MFA, and RBAC policies. Soft skills: Effective communication: Ability to convey complex security concepts in an accessible manner. Emotional intelligence (EQ): Fostering empathy and understanding in all interactions. Commitment to greatness: A results-driven mindset with a focus on excellence. Human-centricity: Ensuring solutions benefit both people and systems. Analytical thinking: Strong problem-solving and decision-making skills. Flexibility: Adaptable to changing priorities and challenges. Conflict management skills: Skilled in resolving disputes constructively and efficiently. Inter-dependence: A team player who thrives in collaborative environments. Qualification that can be a plus: SIEM, Cloudflare, k8s, ELK. Any IT / DevOps / Security certifications. Knowledge of modern DevSecOps practices. Expertise in scripting or programming languages such as Python, Go, Bash. Experience with security risk assessment frameworks, such as NIST, ISO 27001, or CIS. Hands-on experience with vulnerability scanning and penetration testing tools, such as Nessus, Qualys, or Metasploit. Knowledge of compliance standards (e.g., GDPR, HIPAA, PCI DSS) and their implications on IT security practices. Conditions We know that great talent deserves great conditions, so here's what you can expect when joining us: EU-based employment contract and a 3-year Cyprus work visa with full support for your relocation and visa processes, including assistance for your family. Full relocation package: flights to Limassol for you and your family, a company-covered apartment for the first month, and full relocation support to make your move smooth and hassle-free. Transparent performance reviews twice a year, with bonus opportunities and salary adjustments. Private medical insurance for you and your family, a corporate mobile plan (unlimited in Cyprus with roaming included), and interest-free support for car purchases. Mindfulness & well-being support, including psychological assistance with 50% coverage. 50% coverage of school and kindergarten fees for your children. Fully covered sports benefits, and also access to in-house electric scooters and bike rentals. Provident fund (Cyprus): a long-term savings plan co-funded by you and the Company together (available after probation) that grows throughout your time with us in Cyprus. Investment in your growth: paid language courses and access to suited-for-you development programs, including conferences, training programs, and coaching to support your professional journey. A culture of recognition: a peer reward program to celebrate your contributions. A fully equipped office in Limassol’s city center, with everything you need for deep work and collaboration. Free catering in the office and an in-house coffee bar with high-quality drinks and a health bar stocked with nutritious snacks. A strong engineering culture: international teams, corporate events, team buildings, and hackathons—because great work happens in great communities. Recruitment process HR interview (45 min); Technical interview (1.5 hours); Final interview with HRBP (45 min) - optional.

Требования: — Опыт администрирования Linux (RedOS / Fedora / CentOS), управление пользователями, контейнеризация (Docker) — Опыт с Yandex Cloud: VPC, Cloud DNS/Certificate Management, Compute/GPU, AI Studio, IAM/Users/Service Accounts — Опыт с Terraform и Terragrunt — Навыки создания ролей и описания конфигураций в Ansible