Вакансии

Location: London & San Francisco Workplace: onsite Application deadline: We are conducting interviews actively and aim to fill this role as soon as we find someone suitable. ABOUT THE OPPORTUNITY The OpenAI/Hugging Face incident may be the biggest warning shot we get before catastrophic loss-of-control. In its aftermath, Anthropic and OpenAI publicly committed to giving embedded evaluators an unprecedented level of access. Embedded evaluations are the best existing method to find out whether alignment is on track. With OpenAI predicting an automated researcher by March 2028, we don't have time to start with an MVP embedded evaluation and iteratively improve it. The first embedded evaluations will set the standard and we have to get it right.  Apollo has taken steps toward becoming an embedded evaluator at frontier labs. We want to hire experienced senior researchers with a strong track record of getting things done to execute our embeddedevaluationplans. KEY RESPONSIBILITIES If embedded evaluations happen, you will be on one of the following teams: On-site embedded evaluators: This team will spend weeks or months embedded at a frontier AI lab, where they will conduct interviews, review the lab’s evidence, gather new evidence, and write a report. They will execute a playbook quickly and adapt to unforeseen circumstances. We hold our embedded evaluators to the highest standards, so you will likely have to first prove yourself within Apollo before being sent into an embedded campaign. That is, you will probably start on the applied research team to gain context on embedded evaluations. For this team, we prefer candidates with the right to work in the US who can be based in San Francisco. Applied researchers: This team will be the force-multiplier behind embedded evaluations. They will prepare on-site evaluators before they are embedded and support them while they are embedded. They will do the conceptual work to determine what evidence would support a safety case, and write the playbook for on-site evaluators to optimize how fast they can gather evidence. They will develop tooling for embedded evaluators, both ahead-of-time and urgently on demand. They will be the bridge connecting fundamental research and the on-site evaluators. For example, they might convert the methodology of “Measuring Reward-Seeking via Contrastive Belief Updates” into turnkey code and procedures. This team can work from any of our offices. Both are high-stakes teams. On-site embedded evaluators should be exceptionally strong at quick execution under high pressure, and very strong at planning and research. Applied researchers should be exceptionally strong at planning and research, and very strong at quick execution under high pressure. For both teams, we are excited for experienced candidates who have owned ambitious projects end-to-end under tight deadlines. KEY REQUIREMENTS We don’t require a formal background or industry experience and welcome self-taught candidates. We assess demonstrated ability, including through independent research and nontraditional paths; prior formal management titles are not required. Technical safety research judgment: You have a strong track record of producing or leading technically rigorous research relevant to understanding and reducing risks from advanced AI. Your background might include alignment, interpretability, model evaluations, control, adversarial ML, or post-training. You understand modern model training well enough to interrogate a lab’s methods and learn unfamiliar pipelines quickly. Deep experience with frontier RL or post-training is valuable but not required. Research leadership and delivery: You have led ambitious technical projects end-to-end under hard deadlines and managed or closely supervised strong individual contributors (ICs). You can set research priorities, delegate meaningful ownership, review technical work, and keep a team focused on the questions that matter most. Data Analysis & Pattern Recognition: You can extract signal from large, messy datasets. You're comfortable with quantitative analysis and know when qualitative assessment is more appropriate. You can identify anomalies and unexpected model behaviors. Writing for high-stakes audiences: You have experience writing about qualitative and quantitative findings for different stakeholders. You can take a pile of unorganized technical information and communicate it effectively to lab safety teams, lab leadership, governments, or the public. Strong understanding of scheming: You have a strong conceptual understanding of ideas like metagaming, evaluation awareness, deception, and reward-seeking. You are familiar with classic literature like Is Power-Seeking AI an Existential Risk? and modern research. AI power-user: You’re capable of using AI to accelerate your work, technical or otherwise. You have experience using different models, know which ones to use for which tasks, when not to use AI, and always experiment with new AI workflows. Professionalism: You can represent Apollo independently in sustained, high-stakes technical collaborations.  Your professional conduct is unimpeachable. You know when to tactfully resolve disagreements with partners and when to stand firm in negotiations, and you are excellent at both of those. Mission commitment: Apollo estimates that RSI will happen soon, and we are extremely concerned that AGI will catastrophically not be aligned with human values. Hence we have an “intense, but in a good way” culture . We will ask a lot from you, but in return you will personally have a large impact on loss-of-control risk. NICE TO HAVES Software engineering skills: Strong software engineering skills correlate highly with effective execution, even in an era of AI agents. Our entire stack uses Python. Prior embedded expertise: You have previous experience in professional services like auditing or consulting. You’ve learned lessons from working on-site with clients that will generalize to working with frontier AI labs. We want to emphasize that people who feel they don’t fulfill all of these characteristics but think they would be a good fit for the position, nonetheless, are strongly encouraged to apply. We believe that excellent candidates can come from a variety of backgrounds and are excited to give you opportunities to shine. BENEFITS This role offers a market-competitive salary, equity, and competitive benefits. Depending on your experience, you may be offered a Lead or individual contributor position. Salary: Recognised experts who can lead projects of significant scope: USD 350,000 - USD 590,000 or £230,000 - £395,000 Strong individual contributors: USD 245,000 - USD 405,000 or £160,000 - £270,000 Unlimited vacation Unlimited sick leave Up to 6 months of paid parental leave Comprehensive health, dental and vision insurance Retirement savings with competitive employer matching (e.g. 401(k) for US employees) Lunch, dinner, and snacks are provided for all employees on workdays Paid work trips, including staff retreats, business trips, and relevant conferences A yearly $1,000 (USD) professional development budget Relocation support and visa fees (if applicable). We are able to sponsor visas to the UK and US. LOGISTICS Time Allocation : Full-time Location : This is an in-person role working out of our London or San Francisco office. We prefer on-site embedded evaluators to be permanently located in San Francisco. Applied researchers can work from any of our offices. We offer flexible working hours and WFH arrangements. Remote candidates will only be considered if they are exceptional and can travel at least 1 week/month to either office. Visa sponsorship: We sponsor visas in both the UK and US. Sponsorship isn't guaranteed for every role or candidate, but if we make you an offer, we'll work with you to find the right visa route ABOUT APOLLO RESEARCH The rapid rise in AI capabilities offers tremendous opportunities, but also presents significant risks. At Apollo Research, we’re primarily concerned with risks from Loss of Control, i.e. risks coming from the model itself rather than e.g. humans misusing the AI. We’re particularly concerned with deceptive alignment / scheming, a phenomenon where a model appears to be aligned but is, in fact, misaligned and capable of evading human oversight. We work on the detection of scheming (e.g., building evaluations and novel evaluation techniques), the science of scheming (e.g., model organisms and the study of scaling trends), and scheming mitigations (e.g., control). We closely work with multiple frontier AI companies, e.g. to test their models before deployment and collaborate on fundamental research. At Apollo, we aim for a culture that emphasizes truth-seeking, being goal-oriented, giving and receiving constructive feedback, and being friendly and helpful. If you’re interested in more details about what it’s like working at Apollo, you can find more information here. ABOUT THE TEAM Alex Meinke leads the science of scheming team’s research agenda with guidance from Marius Hobbhahn, though team members lead individual projects. You will mostly work with the science of scheming team as well as our team of software engineers, but you will likely sometimes interact with the governance team to translate technical knowledge into concrete recommendations. You can find our full team here. Equality Statement: Apollo Research is an Equal Opportunity Employer. We value diversity and are committed to providing equal opportunities to all, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, or sexual orientation.  How to apply: Please complete the application form with your CV. The provision of a cover letter is optional but not necessary. Please also feel free to share links to relevant work samples. About the interview process: Our multi-stage process includes a screening interview, 3 technical interviews, and a final interview with Marius (CEO). The technical interviews will be closely related to tasks the candidate would do on the job. There are no LeetCode-style general coding interviews. If you want to prepare for the interviews, we suggest (a) thinking about what embedded evaluators should investigate, (b) building a tool that would be useful for embedded evaluators and running it on suitable proxy data, and/or (c) writing a report based on mock findings.  Your Privacy and Fairness in Our Recruitment Process: We are committed to protecting your data, ensuring fairness, and adhering to workplace fairness principles in our recruitment process. To enhance hiring efficiency, we use AI-powered tools to assist with tasks such as resume screening. These tools are designed and deployed in compliance with internationally recognized AI governance frameworks. Your personal data is handled securely and transparently. We adopt a human-centred approach: all resumes are screened by a human and final hiring decisions are made by our team. If you have questions about how your data is processed or wish to report concerns about fairness, please contact us at info@apolloresearch.ai.

Location: Remote Canada At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm's engineering team is building a large-scale, highly-available, and global infrastructure that is shared across multiple financial products. Ensuring that our infrastructure is accessible to all engineers is critical to the success of the business. We pride ourselves on our culture across engineering of engaging in thorough technical design review, operational excellence, and capable incident response and analysis. The Compute Platform team owns the EKS foundation that Affirm's products run on, from cluster provisioning and lifecycle through the safety standards that keep thousands of workloads reliable at scale. Affirm operates 90+ EKS clusters across environments and regions, and this team is responsible for making that fleet standardized, automated, observable, and self-healing, while establishing and enforcing the workload configuration standards that protect availability. Our mission is to provide a secure, reliable, and scalable Kubernetes platform that lets infrastructure and application teams deploy and operate with confidence and minimal operational friction. What you’ll do As a member of the Compute Platform organization, you will collaborate with other teams - including Product, Infrastructure, Traffic, Cost & Capacity Engineering to: Architect and evolve Affirm's EKS platform, driving strategy across cluster lifecycle, node management, and shared cluster components Lead the technical direction for cluster provisioning, upgrades, and teardown through standardized IaC (Terraform, Spacelift) and self-service workflows Own the reliability of core shared components across the fleet (Karpenter, CoreDNS, VPC CNI, Kube Proxy, Metrics Server, etc) and the CI/CD pipeline that ships them consistently Define and enforce EKS workload safety standards covering resource configuration, workload isolation and blast radius, disruption tolerance (PDBs), Karpenter consolidation strategies, etc Build the enforcement and automation path that moves each standard from research and white-glove onboarding through broad adoption to policy-enforced defaults for new workloads Establish the observability, baseline audits, and reporting needed to identify hot spots and measure risk mitigation over time Partner with cluster-user teams (checkout, batch, ML, analytics, DevProd, etc) to understand workload needs and shape the platform accordingly Drive cost and capacity strategy across node scaling, bin packing, and EC2 instance selection Mentor engineers across the Compute Platform teams and set the bar for operational excellence Participate in the on-call rotation, triage and catalogue runtime K8s issues, and collaborate with SRE on production incidents What we look for Deep EKS and Kubernetes internals expertise, including cluster upgrades, node lifecycle, scheduling, and autoscaling (Karpenter, Cluster Autoscaler) Demonstrated experience automating Kubernetes operations at fleet scale, from cluster provisioning, upgrades, and node lifecycle to self-healing remediation and policy-driven enforcement, replacing manual toil with auditable, self-service workflows Strong grasp of workload reliability patterns: resource tuning, probes, PDBs, topology and isolation constraints Experience designing and enforcing platform standards through policy (admission control, OPA/Gatekeeper or equivalent) and automated frameworks Infrastructure as Code fluency with Terraform and a GitOps or pipeline-driven delivery model (ArgoCD, kube-applier, or similar) Observability instincts: defining SLOs, building metrics, logs, and alerting coverage, and running data-driven baseline audits Cross-functional collaboration skills with platform, product, SRE, and capacity teams Demonstrated mentorship and technical leadership across teams Drive to track emerging Kubernetes community best practices and adapt them to Affirm's needs Qualifications 10+ years in software or infrastructure engineering with proven delivery of complex platform solutions 6+ years hands-on operating production Kubernetes at scale, ideally EKS on AWS Strong cloud-native architecture experience on AWS (EC2, VPC, IAM, EKS) Experience with Infrastructure-as-Code (Terraform, Spacelift a plus) and GitOps-style deployment pipelines Expert-level proficiency in Go or Python and a proven track record building production-grade Kubernetes controllers, operators, and platform tooling that other engineering teams depend on Track record designing and enforcing standards across many teams without becoming a bottleneck Exceptional problem-solving and systems-thinking skills Demonstrated leadership and cross-functional influence Excellent communication skills Base Pay Grade - R Equity Grade - 9 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) CAN base pay range per year: $ 209,000 - 269,000 #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Remote US At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm's engineering team is building a large-scale, highly-available, and global infrastructure that is shared across multiple financial products. Ensuring that our infrastructure is accessible to all engineers is critical to the success of the business. We pride ourselves on our culture across engineering of engaging in thorough technical design review, operational excellence, and capable incident response and analysis. The Compute Platform team owns the EKS foundation that Affirm's products run on, from cluster provisioning and lifecycle through the safety standards that keep thousands of workloads reliable at scale. Affirm operates 90+ EKS clusters across environments and regions, and this team is responsible for making that fleet standardized, automated, observable, and self-healing, while establishing and enforcing the workload configuration standards that protect availability. Our mission is to provide a secure, reliable, and scalable Kubernetes platform that lets infrastructure and application teams deploy and operate with confidence and minimal operational friction. What you’ll do As a member of the Compute Platform organization, you will collaborate with other teams - including Product, Infrastructure, Traffic, Cost & Capacity Engineering to: Architect and evolve Affirm's EKS platform, driving strategy across cluster lifecycle, node management, and shared cluster components Lead the technical direction for cluster provisioning, upgrades, and teardown through standardized IaC (Terraform, Spacelift) and self-service workflows Own the reliability of core shared components across the fleet (Karpenter, CoreDNS, VPC CNI, Kube Proxy, Metrics Server, etc) and the CI/CD pipeline that ships them consistently Define and enforce EKS workload safety standards covering resource configuration, workload isolation and blast radius, disruption tolerance (PDBs), Karpenter consolidation strategies, etc Build the enforcement and automation path that moves each standard from research and white-glove onboarding through broad adoption to policy-enforced defaults for new workloads Establish the observability, baseline audits, and reporting needed to identify hot spots and measure risk mitigation over time Partner with cluster-user teams (checkout, batch, ML, analytics, DevProd, etc) to understand workload needs and shape the platform accordingly Drive cost and capacity strategy across node scaling, bin packing, and EC2 instance selection Mentor engineers across the Compute Platform teams and set the bar for operational excellence Participate in the on-call rotation, triage and catalogue runtime K8s issues, and collaborate with SRE on production incidents What we look for Deep EKS and Kubernetes internals expertise, including cluster upgrades, node lifecycle, scheduling, and autoscaling (Karpenter, Cluster Autoscaler) Demonstrated experience automating Kubernetes operations at fleet scale, from cluster provisioning, upgrades, and node lifecycle to self-healing remediation and policy-driven enforcement, replacing manual toil with auditable, self-service workflows Strong grasp of workload reliability patterns: resource tuning, probes, PDBs, topology and isolation constraints Experience designing and enforcing platform standards through policy (admission control, OPA/Gatekeeper or equivalent) and automated frameworks Infrastructure as Code fluency with Terraform and a GitOps or pipeline-driven delivery model (ArgoCD, kube-applier, or similar) Observability instincts: defining SLOs, building metrics, logs, and alerting coverage, and running data-driven baseline audits Cross-functional collaboration skills with platform, product, SRE, and capacity teams Demonstrated mentorship and technical leadership across teams Drive to track emerging Kubernetes community best practices and adapt them to Affirm's needs Qualifications 10+ years in software or infrastructure engineering with proven delivery of complex platform solutions 6+ years hands-on operating production Kubernetes at scale, ideally EKS on AWS Strong cloud-native architecture experience on AWS (EC2, VPC, IAM, EKS) Experience with Infrastructure-as-Code (Terraform, Spacelift a plus) and GitOps-style deployment pipelines Expert-level proficiency in Go or Python and a proven track record building production-grade Kubernetes controllers, operators, and platform tooling that other engineering teams depend on Track record designing and enforcing standards across many teams without becoming a bottleneck Exceptional problem-solving and systems-thinking skills Demonstrated leadership and cross-functional influence Excellent communication skills Base Pay Grade - R Equity Grade - 15 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) USA base pay range (CA, WA, NY, NJ, CT) per year: $265,000 - $325,000 USA base pay range (all other U.S. states) per year: $236,000 - $296,000 #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Bucharest Workplace: OnSite LIFE AT UIPATH The people at UiPath believe in the transformative power of automation to change how the world works. We’re committed to creating category-leading enterprise software that unleashes that power. To make that happen, we need people who are curious, self-propelled, generous, and genuine. People who love being part of a fast-moving, fast-thinking growth company. And people who care—about each other, about UiPath, and about our larger purpose. Could that be you? YOUR MISSION As a Principal Software Engineer on the LLM Gateway team, you will set the technical direction of UiPath’s AI Trust Layer: the gateway through which every UiPath product, and every agent our customers build, reaches models from OpenAI, Anthropic, Google and other commercial and open-weight providers. You will lead the architecture of a secure, globally distributed, high-throughput proxy serving text, image, voice and emerging modalities, with intelligent routing, rate limiting and cost controls, running the same way in our public cloud, in government and sovereign clouds, and in customer-hosted deployments. You will own the LLM infrastructure behind it: sourcing and balancing model capacity across vendors, tiers and regions, with data residency guaranteed in every geography. You will also own how customers see and control AI in their organizations: which models their users and automations can access, including the models they bring themselves, under what conditions, and with what policies, data protection and audit trail. You will raise the engineering bar of the team, work closely with product teams, security, legal and our model vendors, and help shape how we build software with AI agents.   WHAT YOU'LL DO AT UIPATH - Lead the architecture and technical direction of complex backend and cloud-native services across the UiPath platform. - Design scalable, secure, reliable, and high-performing distributed systems across cloud, on-premises, and hybrid environments. - Partner with engineering leaders, architects, product managers, and cross-functional teams to shape technical solutions for high-impact product and platform areas. - Drive technical planning and roadmap input for complex services, platform capabilities, or cross-team initiatives. - Identify long-term scalability, reliability, security, performance, and cost challenges, and lead the design of sustainable solutions. - Set high standards for system design, code quality, testing, observability, automation, incident management, and engineering excellence. - Mentor and guide engineers through design reviews, technical discussions, architecture decisions, and hands-on technical feedback. WHAT YOU'LL BRING TO THE TEAM - 7+ years of software engineering experience, with strong backend and cloud development experience. - Hands-on experience with one or more modern programming languages such as C#, Java, Python, or Go. - Strong experience designing and building distributed systems, microservices, APIs, and cloud-native architectures. - Proven ability to influence technical direction and drive architecture decisions across teams. - Experience building and operating production-grade services in cloud environments such as Azure, AWS, or GCP. - Good knowledge of containers, Kubernetes, CI/CD, monitoring, logging, observability, and production operations. - Strong understanding of system design, data structures, algorithms, multithreading, asynchronous programming, and performance optimization. - Experience with relational and/or NoSQL databases, messaging systems, event-driven architectures, or high-scale data processing. - Ability to balance customer experience, reliability, security, scalability, and cloud cost when making technical decisions. - Strong technical leadership, ownership, and communication skills, with the ability to guide teams through ambiguity. - Interest in automation, AI, developer platforms, enterprise software, or large-scale cloud systems is a plus. Maybe you don’t tick all the boxes above—but still think you’d be great for the job? Go ahead, apply anyway. Please. Because we know that experience comes in all shapes and sizes—and passion can’t be learned. Many of our roles allow for flexibility in when and where work gets done. Depending on the needs of the business and the role, the number of hybrid, office-based, and remote workers will vary from team to team. Applications are assessed on a rolling basis and there is no fixed deadline for this requisition. The application window may change depending on the volume of applications received or may close immediately if a qualified candidate is selected. We value a range of diverse backgrounds, experiences and ideas. We pride ourselves on our diversity and inclusive workplace that provides equal opportunities to all persons regardless of age, race, color, religion, sex, sexual orientation, gender identity, and expression, national origin, disability, neurodiversity, military and/or veteran status, or any other protected classes. Additionally, UiPath provides reasonable accommodations for candidates on request and respects applicants' privacy rights. To review these and other legal disclosures, visit our privacy policy https://www.uipath.com/legal/trust-and-security/privacy-policy.

Знание стандартных настроек процессов сбыта от запроса клиента до фактурирования, включая возвраты и корректировочные документы. Знание и практическое применение техники условий для ценообразования и выбора выходных документов.

Location: Berat, Albania Workplace: remote At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Business Analyst to join one of our clients ' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you. Responsibilities: Gather, analyze, document, and prioritize customer business requirements. Translate customer needs and pain points into detailed product requirements and agile user stories. Prepare and maintain Business Requirements Documents (BRDs). Act as a proxy Product Owner, supporting development and Scrum teams throughout project delivery. Collaborate with customers, stakeholders, and technical teams to align business objectives with solutions. Conduct product gap analysis to identify missing functionalities and improvement opportunities. Analyze and model business processes to support solution design and implementation. Support backlog prioritization and ensure requirements are clearly understood by development teams. Ensure delivered solutions meet customer expectations and business objectives. Apply Agile methodologies and requirements management best practices. A university degree (preferable business or IT related); 5+ years working experience as a Business Analyst in the field Experience working on lending products such as commercial, corporate or construction loans Good communication skills; Good analytical and evaluative skills in order to translate customer pain points into detailed product requirements; Ability to execute product gap analysis based on gathered requirements to maximize project and customer success; Knowledge on requirements management, process modeling and development methodologies.

You will: Contribute to the edge proxy platform: Assist in maintaining, upgrading, and extending a high-performance reverse proxy.

Location: London, United Kingdom - Deliveroo Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. About the Company Help us build the world's most reliable, on-demand logistics engine for last-mile delivery! We're bringing on experienced engineers to help us create and maintain a 24x7, no downtime, global infrastructure system that powers the company’s three-sided marketplace of consumers, merchants, and riders. About the Role We are looking for experienced engineers to join the EU Traffic team, based at Deliveroo, part of DoorDash, and help build the next generation of DoorDash’s Traffic platform. We are building a single, shared platform designed to serve DoorDash, Deliveroo, and Wolt, so your work will shape reliability and security for all three marketplaces. Our team owns the infrastructure that carries every request into and through that platform: the edge, where we manage Cloudflare (CDN, DNS, rate limiting, bot mitigation) and the ingress systems for external traffic, and service-to-service (S2S) communication, where we run the service mesh and the authentication that secures calls between thousands of services across multiple regions. You will work on core components of our traffic stack, including our Cloudflare edge configuration (managed as code), and service-to-service authentication and authorization (workload identity, token issuance and validation at the mesh layer). This role sits at the intersection of distributed systems, networking, and security. It includes designing, building, and maintaining systems that must operate reliably and efficiently across some of the most critical and latency-sensitive workloads at DoorDash, from the first byte at the edge to the last hop between services. You will report to the Engineering Manager of the EU-Traffic Team within the Infrastructure organization. This role is hybrid working from London. You’re excited about this opportunity because you will… Design and build large-scale distributed systems that are high RPS and latency sensitive Troubleshoot, debug, and fix issues that affect production and maintain our SLAs Work collaboratively with other platform and product engineers to deliver on feature requests and solve their problems Find ways to improve the team’s productivity and operational capabilities through the use of automation, AI tools, and other avenues Participate in a shared on-call rotation and help lead production investigations and incidents, with support from teammates Mentor and learn from teammates through design reviews, pairing, and incident reviews We’re excited about you because… You have 5+ years of experience as a software engineer in infrastructure, networking, or platform engineering/SRE Experience operating edge technologies at scale, such as CDN, WAF, proxy layers, and DNS Solid understanding of networking fundamentals like TCP/IP, HTTP, HTTP/2, gRPC, Load Balancing Background working on and debugging high-QPS or latency-sensitive systems You’re curious, collaborative, and comfortable making progress in ambiguity You work AI-first: you delegate to and orchestrate coding agents (e.g., Claude Code, Codex, Cursor) across design, implementation, testing, incident response, and releases If you don’t meet every requirement but are excited about this work, we’d still love to hear from you. Bonus points if you… Experience with programming languages like Go, C++, Python or Rust Experience with AWS, especially with networking primitives like LBs, Privatelink, etc. and Kubernetes or other container management tool Experience with service mesh technologies such as Envoy, Istio or Linkerd Familiarity with xDS or control plane architectures Experience building RPC frameworks or client-side networking libraries Experience with Infrastructure as Code tooling like Terraform Experience with Gitops delivery tooling such as ArgoCD, Helm, Atlantis. Track record of sharing prompts, tooling, and practices that make a whole team faster with AI Diversity, Equity and Inclusion At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and inclusion make us stronger, more creative, and better at what we do. We’re committed to fostering an environment where everyone can do their best work and feel they belong. We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief. If you have a disability or long-term health condition and need support to apply for one of our roles, or require any reasonable adjustments during the recruitment process, you’ll have the opportunity to let us know once you’ve submitted your application. We’ll share details on how to request support so we can ensure you have a fair and equitable experience. If you’re excited about making a real impact in a fast-moving marketplace and growing your career alongside ambitious, supportive teams, we’d love to hear from you! Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at careersatdoordash.com/recruitment-scam-awareness .

Чем предстоит заниматься: Развивать собственную CDN-сеть на базе BGP Anycast с NGINX/Envoy (xDS для динамической конфигурации); Формировать и контролировать SLI/SLO для edge-инфраструктуры;

Location: Brazil; Peru; Colombia; Argentina; Mexico; Chile Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. Kraken's engineers build a lot of software. Developer Platform AI builds the AI systems they use to do it: agents that write and review code, simple access to the best models in the tools they already use, and the infrastructure that connects AI to our internal systems. This is a small team with a lot of reach. The tools you ship will change how engineers across Kraken work every day, and you'll see that happen directly. The work spans agent platforms, code review, LLM routing and cost controls, MCP integrations with tools like Slack, Jira and GitLab, and the security and observability that make all of it safe to run. If you want to work on applied AI with real users from day one, this is that job.   THE OPPORTUNITY - LLM traffic doesn't behave like normal API traffic. Requests are long-running, streaming and expensive. One prompt can cost a few cents or a few dollars. One team's burst can burn another team's budget. Providers change their rate limits, failure modes and pricing without warning. Running this well is a problem few companies have solved, and it's the job. - Own the reliability of the platform engineers depend on: the AI Gateway, the agent runtime and the connections to internal tools. Set the SLOs, own the error budgets and decide what happens when they're spent. - Design resilience across model providers: routing, failover, retries, rate limiting and graceful degradation when a provider is slow, throttling or down. - Make LLM traffic legible. Build observability that shows latency, errors, token usage and cost by team, model and use case, so engineers can see what their workloads cost and where they're spending their time waiting. - Treat capacity and cost as one problem. Routing decisions affect both latency and spend, and you'll own the tradeoff directly. - Work with Security, Finance and AI governance to put access controls, budgets, audit logging and data handling into the platform, not into a spreadsheet next to it. - Lead incident response and blameless post-incident reviews. Turn what breaks into fixes that stay fixed. - Automate operations with infrastructure as code, safe deployments and progressive rollouts, so the platform gets more reliable as it grows rather than more fragile. - Mentor engineers and raise the operating standard across the team. This is a Staff role. You'll set the technical direction for how the platform runs, not just keep it running. The platform is small enough that your decisions shape it directly, and used broadly enough that they affect every engineering team at Kraken. SKILLS YOU SHOULD HODL - Extensive experience in site reliability, infrastructure or platform engineering, with a track record of owning high-traffic, business-critical services in production - Deep hands-on experience with Kubernetes, a major cloud provider and infrastructure as code such as Terraform - Strong command of SLOs, observability and incident management, and the judgment to know which reliability work actually matters - Proficiency in Rust or Python, and comfort reading and changing a production service's code - Experience with API gateways, reverse proxies or traffic management: load balancing, rate limiting, failover and caching - Experience operating multi-tenant internal platforms, including authentication, authorization and per-tenant cost controls - Staff-level influence: you set direction across teams, write clear design documents and bring other engineers with you NICE TO HAVES - Experience operating LLM gateways or integrating LLM provider APIs at scale: streaming, token-based rate limiting, model routing and caching - Experience serving models yourself, including vLLM or Ray: GPU scheduling, batching, autoscaling and cost per token - Experience building Kubernetes controllers or operators with controller-runtime or kubebuilder - Experience with Consul and Vault for service discovery, configuration and secrets - Experience with model evaluation pipelines for catching quality regressions before and after rollout - Familiarity with coding agents and agent harnesses, and running them safely in sandboxed environments - Experience with cost attribution, budgeting or FinOps for usage-based services - Background in security-sensitive or regulated environments such as financial services or crypto - Contributions to open-source gateway, proxy or observability projects Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: Brazil; Uruguay; Peru; Colombia; Argentina; Mexico; Chile Workplace: Remote BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. Kraken's engineers build a lot of software. Developer Platform AI builds the AI systems they use to do it: agents that write and review code, simple access to the best models in the tools they already use, and the infrastructure that connects AI to our internal systems. This is a small team with a lot of reach. The tools you ship will change how engineers across Kraken work every day, and you'll see that happen directly. The work spans agent platforms, code review, LLM routing and cost controls, MCP integrations with tools like Slack, Jira and GitLab, and the security and observability that make all of it safe to run. If you want to work on applied AI with real users from day one, this is that job. THE OPPORTUNITY - Build the platform Kraken's agents run on: dynamic sandboxes, Slack workflows, approval gates, memory, and agents that can take real engineering work from start to finish - Build our code review agent so merge requests get fast, useful feedback, and human reviewers can spend their time on design, risk and judgment - Give engineers access to approved models in Claude Code, Cursor and Codex with no setup, so trying a new model takes seconds - Build the connections between AI and the tools engineers use every day, including Slack, Jira, GitLab and internal APIs - Route LLM requests to the right model for the job, balancing speed, quality and cost - Work with Security to build access control, audit logging, budgets and cost reporting into the platform - Own features end to end, from design through production, and keep them reliable alongside SRE - Stay close to the engineers using what you build, and use their feedback to decide what comes next SKILLS YOU SHOULD HODL - Solid experience building and running backend or platform services in production - Strong skills in Rust, Python, TypeScript or Go, with a habit of writing well-tested, maintainable code - Comfort with Kubernetes, CI/CD, observability and a major cloud provider - Good judgment about reliability, security and operational tradeoffs - The ability to lead a technical design, write it down clearly, and work with teams outside your own - Ownership: you can take something from idea to production and keep it working once it's there NICE TO HAVES - Hands-on experience with LLM APIs: streaming, token accounting, rate limits, provider failure modes - Experience building agent systems, code review or static analysis tooling, sandboxed execution, or developer tools - Experience with API gateways, proxies or traffic management - Familiarity with OAuth, OIDC and role-based access control - Contributions to open-source infrastructure or developer-platform projects Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. OUR COMMITMENT Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay connected Follow us on X https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice

Location: Москва Мы развиваем продукты автоматизации кибербезопасности в Сбере, помогающие специалистам SOC быстрее расследовать инциденты, реагировать на угрозы и управлять сетевыми доступами. Сегодня мы занимаемся двумя направлениями: \* SOAR – платформа автоматизации расследования и реагирования на инциденты кибербезопасности, объединяющая инструменты SOC, системы защиты и ИТ-инфраструктуру; \* AST – платформа автоматизации управления сетевыми доступами: от формирования согласованных правил по запросам от внешних систем до их применения на межсетевых экранах. Мы планируем активно развивать собственную технологическую платформу, постепенно переходя от вендорских решений к сервисам собственной разработки на Python и TypeScript. В числе новых направлений сервисы автоматизации реагирования, интеграционные платформы и AI-агенты для выполнения задач кибербезопасности. Ищем DevOps-инженера, который поможет создавать инфраструктуру для новых продуктов: выстраивать процессы CI/CD, автоматизировать развёртывание сервисов, обеспечивать их наблюдаемость, безопасность и отказоустойчивость. Предстоит не просто поддерживать готовые решения, а участвовать в формировании инфраструктурной архитектуры и инженерных практик, на которых будут строиться новые продукты команды. Обязанности * строить и развивать CI/CD: сборка, тестовые прогоны, QG, выпуск релизов; * автоматизировать развёртывание и сопровождение сервисов: Ansible, контейнеризация, окружения DEV/ИФТ/ПСИ/ПРОМ; * доводить сервисы до ПРОМ-эксплуатации вместе с командой; * отвечать за надежность: отказоустойчивость, потребление ресурсов, восстановление после сбоев; * диагностировать и устранять инциденты, разбирать причины их возникновения; * развивать наблюдаемость: логи, метрики, алерты, дашборды; * управлять доступами и секретами в контуре продукта; * разрабатывать и вести эксплуатационную документацию и runbook-и; * учитывать требования информационной безопасности и корпоративные QG при выпуске изменений Требования * Linux (RHEL 7.X/8.X — предпочтительно): сетевой стек, права, диагностика производительности, Bash; * Docker/Podman, Kubernetes (Helm, манифесты, диагностика пода); * CI как код: Jenkins pipelines на Groovy, общие библиотеки и шаблонизация пайплайнов; GitOps-подход и Argo CD; * Ansible: собственные плейбуки и роли; * сборка и запуск TypeScript и Python-приложений: зависимости, артефакты, типичные причины падения сборки; * nginx: reverse proxy, TLS, балансировка, диагностика 5xx; * PostgreSQL на уровне сопровождения: резервное копирование и восстановление, репликация, разбор медленных запросов; * мониторинг: Zabbix и/или Prometheus, настройка алертинга; * сети: TCP/IP, DNS, маршрутизация, mTLS; * понимание ITSM-процессов: инцидент, изменение, проблема; работа через согласования и контрольные точки; * опыт эксплуатации сервисов в продакшене от 2–3 лет; * готовность работать в on-prem-контуре без публичных облаков и с внутренними инструментами. * Будет плюсом * качество и артефакты: Nexus OSS, SonarQube, AppSec-платформы; * потоки данных: Kafka; * опыт в финтехе или другом контуре с жёсткими требованиями ИБ. Условия * работа в офисе * ежегодный пересмотр зарплаты, годовая премия * корпоративный спортзал и зоны отдыха * более 400 образовательных программ СберУниверситета для профессионального и карьерного развития * программа адаптации и помощь руководителя на старте (для Junior позиций) * расширенный ДМС, льготное страхование для семьи и корпоративная пенсионная программа * гибкий дисконт по ипотечному кредиту, равный 1/3 ключевой ставки ЦБ * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера.

-Собирать продуктовые и технические требования, описывать сценарии использования и определять архитектурные ограничения и нефункциональные требования. -Проектировать сквозной путь трафика от клиента через edge/точки присутствия и сервисы защиты до origin, выявлять узкие места и точки отказа.

Location: Hybrid About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Singapore or Sydney About the department In this role, you will be focused on maintaining the Cloudflare global network. You'll work closely with Cloudflare’s SRE (Site Reliability Engineering) team, Network Engineering team, Network Deployment Engineering team and with various vendors and partners (including hardware vendors, datacenter and network providers, and ISPs) to maintain and improve our global infrastructure. You will further be responsible for the development and implementation of consistent processes and visibility measurements for consistent and effective management of our infrastructure. This is a highly visible position that requires deep technical understanding of datacenter infrastructure, networking (physical), and basic experience with data analysis and project management. To be successful in this position, you should have excellent technical skills, communication skills, and be able to navigate a range of challenges and constraints (e.g. schedule adherence, time zones, and cultures). You will have the opportunity to (literally) build a faster, safer Internet for our millions of users and the billions of web surfers that visit their sites each month. Who you are You will thrive in a hypergrowth engineering environment and be self driven with a keen attention to detail. You will come with a deep technical understanding of Data Center colocation environments, network architecture and server technologies. You will be used to working through partners to support infrastructure delivery to a number of remote locations. You will have had experience managing operational environments, and used to developing new approaches to improve delivery efficiency or operational stability. What you'll do Collaborating with internal teams (Infrastructure, Network Engineering and SRE). Create documentation and manage remote contractors to complete datacenter tasks, working with hardware manufacturers, datacenter and network providers, logistics partners and other service providers in support of our 330+ cities and 125+ countries Maintain Data Center environment operational availability Leverage AI tools to automate repetitive operational tasks, accelerate documentation, and speed up troubleshooting and root-cause analysis Creating and maintaining documentation, plans, SOP’s, MOP’s etc. Support and configure network infrastructure where required Providing feedback to internal teams to support internal tools and external vendor partnerships Required Experience Experience with Juniper, Cisco and DWDM network equipment Minimum of 4 years experience of Linux systems administration Experience managing and instructing remote contractors Familiarity with work required to stand up infrastructure in remote colocation facilities Experience running and improving operational processes, including automation tooling, in a rapidly changing environment Familiarity with day-to-day tasks and projects common to Data Center Operations (deployment, migration, decommissioning etc.) Comfortable handling basic program management responsibilities (prioritization, planning, scheduling, status reporting) such as JIRA Participate in a shared on-call rotation to maintain 24×7 operational availability of the global network. Other Responsibilities May Include Aggressively seek opportunities to introduce cutting-edge technology and automation solutions that are effective, efficient and scalable in order to improve our ability to deploy and maintain our global infrastructure Assist with the definition, documentation and implementation of consistent processes across all region Limited travel Examples of desirable skills, knowledge and experience Bachelor’s degree; technical background in engineering, computer science, or MIS Direct experience executing on complex data center/infrastructure projects Previous experience installing / maintaining data center (and other IT) infrastructure and DCIM tools Experience running and improving operational processes in a rapidly changing environment Strong verbal and written communication skills, problem-solving skills, attention to detail, and interpersonal skills Must be proactive with proven ability to learn fast and execute on multiple tasks simultaneously Ability to manage Microsoft Excel and Google Sheets Comfortable handling basic program management responsibilities (prioritization, planning, scheduling, status reporting) such as JIRA Must be a team player Bonus Points Experience working with infrastructure in multiple countries Comfortable with remote “lights-out” and out-of-band access to data center resources Linux certifications (RHCSA etc.) Network certifications (CCNA, JNCIA or higher) Configuration management systems such as Saltstack, Chef, Puppet or Ansible Scripting or software development experience in Bash, Python or Go-lang Familiarity with load balancing and reverse proxies such as Nginx, Varnish, HAProxy, Apache Experience in working within a large scale SaaS vendor What Makes Cloudflare Special? We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.  More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

You will own the reliability, performance, and cost efficiency of the PostgreSQL data platform behind our flagship CMS — primarily Amazon Aurora PostgreSQL — along with the infrastructure and automation around it. This is a reliability engineering role,.

Location: Москва Workplace: Гибридный О компании MWS Cloud Platform — новая облачная платформа от МТС Web Services, построенная на собственных технологиях виртуализации и надёжной инфраструктуре МТС. Мы управляем всем циклом разработки — от оборудования и дата-центров до кода. Наша цель — создать высокотехнологичное облако для самых требовательных заказчиков, при этом понятное и удобное для разработчиков. Присоединяйся — у нас амбициозные задачи, сильная инженерная команда и реальная возможность повлиять на архитектуру облака федерального масштаба. Обязанности Сопровождение и экспертная поддержка существующих и вновь создаваемых сервисов, систем и приложений по всем вопросам ИБ: ◦ анализ архитектур сервисов и приложений, схем, потоков данных, внешних и внутренних интеграций; ◦ выявление и оценка рисков безопасности и функционирования различных процессов в составе инфраструктуры компании; ◦ формирование предложений, решений, практик и требований к системам/сервисам/приложениям по информационной безопасности и минимизации рисков в процессе функционирования. Моделирование угроз безопасности, экспертная проработка сценариев реагирования и противодействия; Планирование и проектирование решений, сопровождение и контроль реализации мер защиты для систем и сервисов компании; Экспертное сопровождение по всем вопросам ИБ проектных и эксплуатационных команд и их взаимодействия с бизнес-командами: ◦ выполнение функций бизнес-партнера по вопросам ИБ для продуктовых и сервисных команд; ◦ выполнение функции ЛПР по вопросам ИБ для продуктовых и сервисных команд. Развитие внутренних процессов и сервисов ИБ с т.з применения лучших практик относительно актуальных угроз и потребностей; Поддержка и участиев текущих ИБ -и ИТ процессах компании в качестве ответственного со стороны ИБ; Приоритезация и обоснование проектов и задач ИБ для бизнеса и ИТ компании; Участие в профильных мероприятиях/встречах/конференциях в качестве эксперта и/или докладчика в части продуктов/сервисов/процессов/услуг, реализуемых компанией по направлению ИБ. Требования Знание принципов и лучших практик проектирования безопасных архитектур сервисов и приложений - монолитных или микросервисных; Представление и понимание актуального состава угроз для инфраструктуры крупных компаний; Знание актуальных векторов атак, тактик, техник и процедур, применяемых злоумышленниками; Знание технологий: ◦ стек TCP/IP (модель OSI, методы и инструменты контроля и защиты на различных уровнях); ◦ сетевая безопасность (основные принципы, методы и лучшие практики, инструменты, архитектура ZTNA); ◦ SOC (основные принципы, инструментарий, процессы); ◦ разграничение и контроль доступов (ААА, РАМ, RBAC, жизненный цикл и управление УЗ, VPN, SSO, MDM); ◦ прикладная безопасность (инструменты, практики, методы). Обширные знания по различным классам средств защиты информации (NGFW, WAF, AV, DLP, EDR, SIEM, SOAR, MailSec, AAA, AntiDDoS, Proxy и др.) Условия Гибридный или полностью удалённый формат работы, с возможностью гибкого начала и окончания рабочего дня; Профессиональные гильдии инженеров по направлениям, чтобы поддерживать друг друга и обмениваться опытом; Участие во внешних IT конференциях; Полезные курсы и вебинары в корпоративном университете и электронные библиотеки. ДМС с первого месяца работы, включая стоматологию. А ещё оплачиваем 50% стоимости полиса ДМС для родственников; Страхование от несчастных случаев с 1-го месяца работы. Материальная помощь в сложных жизненных ситуациях; Мобильная связь за счёт компании и льготные тарифы для близких; Подписка на online-кинотеатр KION, сервис МТС Музыка, книжный сервис Строки от МТС, безлимитные мессенджеры и соцсети; Скидки и предложения от партнеров на фитнес, занятия английским и прочее.

Location: San Francisco; Remote (United States); Seattle; New York City Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast. RESPONSIBILITIES - Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost. - Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load. - Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers. - Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested. - Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back. - Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works. - Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice. - Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure. - Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team. QUALIFICATIONS We expect you to have real depth in most of these: - Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them. - Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count. - Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down. - Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing). - You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it. - Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter. - A track record of leading production incidents and turning root-cause analysis into durable fixes. - You own problems end-to-end and do well when the path forward isn't laid out for you. ADDITIONAL EXPERIENCE WE VALUE - Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets. - Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF. - GitOps and progressive delivery: Argo CD, Flux, or similar. - Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls. - Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch. - Multi-cloud or neocloud operations (GCP, CoreWeave, or similar). - FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.

Location: San Francisco; Remote (United States); Seattle; New York City Perplexity serves hundreds of millions of queries a month. Every answer, every Perplexity Computer task, and every enterprise deployment runs on production infrastructure owned by the Cloud Infrastructure team: a fleet of Kubernetes clusters across a multi-account AWS estate, private networks that reach hyperscalers and the neoclouds serving our models, and the storage underneath our user data and agentic workloads. We're looking for SREs who treat reliability as a software problem. You'll own compute, networking, and storage at scale and keep production stable while everything built on top of it is changing fast. RESPONSIBILITIES - Own production at scale. Run the compute, networking, and storage foundation behind Perplexity's consumer, Computer, API, and enterprise products, and own its availability, latency, and cost. - Run our Kubernetes fleet. Operate and upgrade the EKS clusters that host web services, search, datastores, and secure sandboxes. Tune scheduling, autoscaling, node lifecycle, DNS, and service networking so clusters stay healthy under bursty, fast-growing load. - Engineer the network. Design and operate VPC architectures, Transit Gateway and PrivateLink connectivity, load balancing, DNS, and egress across accounts, regions, and cloud providers. - Keep data durable and fast. Own the storage layer (EBS, S3, DynamoDB, and the managed databases and caches our services depend on), including performance, durability, backups, and restores that have actually been tested. - Manage everything as code. Run infrastructure through Terraform and CI/CD. Build reusable modules and guardrails, and make every change reviewable, repeatable, and safe to roll back. - Prepare for failures. Define SLOs, build alerts that someone can act on, design for zone and regional failure, and run game days and disaster-recovery exercises that prove recovery works. - Lead incident response. Be on the critical path when things break. Drive incidents to resolution, write blameless postmortems, and land the fixes so the same failure never pages anyone twice. - Scale ahead of demand. Own capacity planning, quotas, reservations, and cost efficiency so product launches and traffic spikes never wait on infrastructure. - Automate away the toil. Build tooling, increasingly agent-driven, that turns provisioning, upgrades, and remediation into self-serve, hands-off workflows for every engineering team. QUALIFICATIONS We expect you to have real depth in most of these: - Deep AWS expertise. You know VPC, IAM, EC2, EKS, ELB, Route 53, S3, EBS, etc. well past the console, including their limits, failure modes, and the bill that comes with them. - Production Kubernetes at scale: cluster upgrades, CNI, CoreDNS, autoscalers like Karpenter, and debugging a misbehaving node at 3 a.m. Writing Helm charts alone doesn't count. - Terraform mastery. You've designed module structures, managed state across many accounts, and run large refactors and imports without taking production down. - Strong networking fundamentals (TCP/IP, DNS, TLS, load balancing, routing). - You write real code in Python, Go, or Rust for automation, tooling, and controllers, and you'd rather automate a runbook than follow it. - Fluency with observability tools like Datadog, Prometheus, or Grafana, and the judgment to turn metrics, logs, and traces into SLOs and alerts that matter. - A track record of leading production incidents and turning root-cause analysis into durable fixes. - You own problems end-to-end and do well when the path forward isn't laid out for you. ADDITIONAL EXPERIENCE WE VALUE - Multi-region active-active or failover architectures, and disaster-recovery programs with real recovery targets. - Proxies, service meshes, and kernel-level networking: Envoy, Istio, Cilium, or eBPF. - GitOps and progressive delivery: Argo CD, Flux, or similar. - Enterprise and compliance environments: single-tenant or BYOC deployments, KMS/BYOK, SOC 2 or similar controls. - Running stateful systems in production: Postgres, Redis, or search engines like Vespa or Elasticsearch. - Multi-cloud or neocloud operations (GCP, CoreWeave, or similar). - FinOps: cost attribution, Savings Plans and reservations, and making infrastructure cheaper without making it fragile.