Задачи:
— Эксплуатация и развитие существующей инфраструктуры;
— Построение и поддержание актуальной сетевой карты инфраструктуры в AWS;
— Развитие и совершенствование системы резервного копирования критичной инфраструктуры с использованием удалённого Proxmox Backup Server;
— Участие в разработке и дальнейшем развитии Disaster Recovery Plan;
— Участие в подготовке и реализации перехода на self-managed Kubernetes;
— Развитие и поддержка системы мониторинга на базе Prometheus и Grafana;
— Автоматизация рутинных и повторяющихся операций;
— Работа с инфраструктурой, управляемой с использованием Terraform (Infrastructure as Code);
— Поддержание актуальной технической документации, инфраструктурных схем, runbooks и инструкций по восстановлению.
Требования:
— Хорошее знание Linux;
— Уверенное понимание основ компьютерных сетей;
— Практический опыт работы с Docker;
— Опыт работы хотя бы с одним публичным облаком (AWS, GCP, Azure и др.);
— Практический опыт организации резервного копирования и восстановления данных;
— Базовый практический опыт работы с Kubernetes;
— Понимание Terraform и принципов Infrastructure as Code (IaC);
— Знание Bash и опыт автоматизации рутинных операций;
— Понимание Git и основных принципов CI/CD;
— Умение диагностировать и устранять инфраструктурные проблемы.
Будет плюсом:
— Опыт работы с Proxmox/PBS, observability и Disaster Recovery;
— Опыт эксплуатации self-managed Kubernetes;
— Опыт использования AI: понимание и проверка предложенных решений перед применением в production.
Условия:
— Уютный дизайнерский офис в пешей доступности от метро Арбатская или Кропоткинская или удаленный формат работы на выбор;
— Вкуснейший кофе, чай, фрукты, овощи, снэки и сладости;
— Компенсация расходов на спорт, английский язык и другие профессиональные курсы;
— Подарки на День Рождения, Свадьбу, рождение ребенка;
— Реферальная система — бонус за приведенного сотрудника;
— Возможность посещения конференций, вебинаров и других мероприятий для повышения профессиональных навыков;
— Работа без бюрократии и ненужных ритуалов.
Процесс отбора:
— HR интервью;
— Техническое собеседование;
— Оффер.
About this role
As the Senior Staff Machine Learning Platform Engineer, you will own the technical vision and evolution of Faire’s ML platform. You will set standards, influence org-wide architecture, and lead complex, cross-functional initiatives that unlock data science velocity at scale. This role will also be key to adapting ML workflows to take advantage of modern AI productivity tools. You won’t just build models, you will architect the systems that allow those models to help tens of thousands of small retailers compete and grow their local businesses.
What You Will Do:
— Define and drive the long-term architecture of Faire’s ML platform including training, inference, feature management, governance
— Establish company-wide standards for code quality, testing, MLOps (CI/CD), experimentation, model lifecycle management, and observability
— Lead adoption and advanced use of Unity Catalog, multi-workspace strategies, and data/ML mesh patterns
— Architect highly scalable ML workflows using Spark, Delta Lake, and MLflow
— Optimize performance, reliability, and cost of the ML platform
— Evaluate and integrate emerging Databricks features
— Stay ahead of the curve by engaging with the latest developments in machine learning and AI
— Serve as senior ML technical advisor to Faire’s data science and production engineering teams
— Represent Faire at ML conferences and meetups
— Mentor ML engineers and raise the overall bar for Machine Learning at Faire
What it takes:
— 10-12 years of experience building and improving large-scale ML or data platforms
— A degree (preferably graduate level) in Computer Science, Engineering, Statistics, or a related technical field
— Deep expertise in Databricks lakehouse architecture, including governance via Unity catalog, orchestration via Workflows, and cost optimization
— Proven ability to design systems that support multiple data science teams and production workloads
— Strong background in distributed systems, ML infrastructure, and cloud architecture
— Demonstrated technical leadership across teams and orgs; ability to influence without authority
— Experience integrating LLM workflows into enterprise platforms is a plus
— Previous contributions to open source ML Infrastructure projects or research publications is a very strong plus
Tech Stack:
Faire uses a modern cloud based tech stack. For this role, you’ll want to be proficient with the following:
— Languages: Python, SQL, Kotlin
— ML Frameworks: PyTorch, PySpark, MLFlow
— Big Data & Processing: Spark, Kafka, Databricks, Snowflake, Fivetran, Iceberg, Unity Catalog, Datadog, Airflow, Cockroach DB, MySQL
— Cloud & Infrastructure: AWS, S3, SageMaker, Kubernetes, Docker, GitHub Actions, Terraform
— Generative AI: Claude Sonnet 4.5, ChatGPT 5.2
Conditions:
Hybrid work format with office presence 3 days per week (Tuesdays, Thursdays, and a flex day) and flexibility to work remotely up to 4 weeks per year. Remote work possible for candidates located in Ontario, Canada.
Salary Range:
$248,000 to $341,000 per year, eligible for equity and benefits. Actual base pay depends on skills, experience, market demands, and location. Base pay range subject to change.
ГибридseniorSpecific Workplace and Information Technology positions may require onsite attendance 5 days per week as will be indicated in the job posting
Задачи:
— Создавать и поддерживать платформу наблюдаемости, которая собирает телеметрию клиентов — события, логи и трассировки — с использованием OpenTelemetry и лучших отраслевых практик
— Разрабатывать возможности дашбордов и визуализации для команд поддержки и полевых команд, обеспечивая видимость состояния системы в реальном времени, выявление проблем и трендов, а также помогать клиентам сохранять устойчивость в масштабе
— Проектировать и реализовывать систему уведомлений и оповещений, основанную на данных телеметрии и эвристиках с использованием AI-агентов и lakehouse-интеллекта
— Писать инфраструктуру как код с помощью Helm и Terraform для упрощения развертывания и эксплуатации внутри Dremio
— Создавать и поддерживать фреймворки приложений, стандартизирующие разработку между командами, решая сквозные задачи, такие как внедрение зависимостей и контроль доступа на основе ролей в масштабе
— Сотрудничать с командами SRE и DevOps для определения лучших практик и предоставления стандартизированных решений для общих инженерных рабочих процессов
— Взаимодействовать с сообществом разработчиков для понимания их проблем и превращения этих знаний в улучшения платформы
— Помогать определять и реализовывать дорожную карту и этапы интеграции с платформой SAP HANA/BDC для обеспечения единого опыта
Требования:
— Степень бакалавра, магистра или выше в области компьютерных наук или смежной области
— Опыт работы в разработке программного обеспечения не менее 5 лет
— Опыт работы с Java не менее 2 лет
— Опыт работы с инфраструктурой как кодом (Helm, Terraform или эквивалент) не менее 2 лет
— Глубокий опыт работы с одной из основных облачных платформ (AWS, Azure или GCP)
— Практический опыт работы с OpenTelemetry или аналогичными платформами наблюдаемости
— Опыт работы с Kubernetes и Docker
— Хорошее понимание основ сетевых технологий (TCP/IP, DNS, HTTP)
— Желание изучать новые технологии и умение решать сложные задачи
Преимущества:
— Опыт создания SaaS микросервисов и распределённых систем
— Опыт работы с многопоточными или асинхронными моделями программирования
— Владение NoSQL базами данных (MongoDB, RocksDB) или Redis
— Опыт работы с CI/CD инструментами (Jenkins, ArgoCD)
— Знание других языков программирования, таких как C++, Go, Python, Node.js, Rust и др.
— Опыт в обработке запросов, распределённых системах, контроле конкуренции, репликации данных или системах хранения
— Опыт настройки Java GC/heap, Apache Arrow, SQL операторов или оптимизации путей данных
Условия:
— Удалённая работа из Португалии или другого места
— Полная занятость
Компания Dremio — это платформа lakehouse для самообслуживания аналитики и ИИ, использующая открытые технологии, включая Apache Iceberg и Apache Arrow, обеспечивающая гибкость и скорость получения инсайтов при снижении затрат.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Toronto, Canada
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
We’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
What you will do as a Customer Engineer
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Key Responsibilities
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
Minimum Qualifications
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Strongly Preferred Qualifications (The "Good-to-Haves")
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Education
Undergraduate or graduate degree in Computer Science, Engineering, or a related field.
Travel
This role will require travel up to 20–50% to attend customer meetings, conferences, industry events, and other in-person team meetings, within the assigned territory. For this reason, candidates must have reliable personal or local public transportation to complete all required travel. Required travel is reimbursable in accordance with the Company's Travel & Expense Policy, as it may be amended from time to time.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Toronto, Canada
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
We’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
What you will do as a Customer Engineer
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Key Responsibilities
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
Minimum Qualifications
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Strongly Preferred Qualifications (The "Good-to-Haves")
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Education
Undergraduate or graduate degree in Computer Science, Engineering, or a related field.
Travel
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
Compensation
This role features a competitive base salary and a variable compensation structure tied directly to the successful execution of full-lifecycle commercial targets, including new business acquisition, ongoing adoption milestones, and overall account expansion.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Задачи:
— Вести инфраструктурные инициативы end-to-end: от проектирования до внедрения и дальнейшей поддержки, включая переход от монолита к гибридной архитектуре;
— Развивать платформу на AWS и managed Kubernetes (EKS) и описывать всю инфраструктуру как код на Terraform;
— Выстраивать и улучшать CI/CD для крупного проекта с quality gates;
— Развивать observability и отвечать за стабильность продакшена в рамках ротации дежурств: инциденты, анализ первопричин, постмортемы;
— Работать напрямую с продуктовыми и платформенными командами: получать высокоуровневые требования и самостоятельно доводить их до результата.
Требования:
— Опыт работы DevOps / SRE с проектами, которые вы вели от начала до конца;
— Недавний практический опыт управления продакшен-инфраструктурой в AWS;
— Уверенное знание managed Kubernetes (развертывание, настройка и администрирование кластеров);
— Глубокий опыт с Terraform;
— CI/CD для крупных проектов с quality gates (GitLab CI или аналоги);
— Observability, автоскейлинг, безопасность и оптимизация затрат;
— Уровень английского B1+; свободное чтение технической документации обязательно.
Будет плюсом: опыт использования AI в работе с инфраструктурой.
Условия:
— Удаленный формат работы, часовой пояс - UTC+2 to UTC+4;
— B2B-контракт, оплата в USD на банковский счет, в криптовалюте или комбинированно;
— 30 оплачиваемых дней отдыха, включая праздники, плюс оплачиваемые больничные;
— Wellness-бюджет и бюджет на обучение, компенсация рабочего оборудования.
УдалённоseniorОсобенности найма: часовой пояс - UTC+2 to UTC+4; Удаленный формат работы, часовой пояс - UTC+2 to UTC+4
Задачи:
— внедрять и развивать архитектуру безопасности в AWS и Azure;
— отвечать за защиту внешнего периметра и вести полный цикл управления уязвимостями;
— выстраивать управление доступом в облаках, Active Directory и аудит Kubernetes;
— настраивать сбор событий безопасности и улучшать обнаружение угроз;
— внедрять безопасные настройки через Terraform;
— отвечать за безопасность внутренних и клиентских API;
Требования:
— от 6 лет опыта в инфраструктуре, облачными платформами или ИБ, из них от 3 лет с основным фокусом на безопасность;
— практический опыт работы с AWS и Azure в сложной инфраструктуре;
— глубокое знание Active Directory, IAM/PAM, SIEM и EDR;
— опыт с Terraform, Kubernetes, CI/CD и скриптами;
— опыт в регулируемых финансовых сервисах и практическое знакомство с защитой криптовалютных платежных систем
Location: Hybrid
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Location: Vancouver, BC
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
We’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
What you will do as a Customer Engineer
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Key Responsibilities
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
Minimum Qualifications
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Strongly Preferred Qualifications (The "Good-to-Haves")
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Education
Undergraduate or graduate degree in Computer Science, Engineering, or a related field.
Travel
This role will require travel up to 20–50% to attend customer meetings, conferences, industry events, and other in-person team meetings, within the assigned territory. For this reason, candidates must have reliable personal or local public transportation to complete all required travel. Required travel is reimbursable in accordance with the Company's Travel & Expense Policy, as it may be amended from time to time.
Compensation
This role features a competitive base salary and a variable compensation structure tied directly to the successful execution of full-lifecycle commercial targets, including new business acquisition, ongoing adoption milestones, and overall account expansion.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Belgrade; London; Berlin
Perplexity is seeking a DevOps engineer to join our small team in revolutionizing the way people search and interact with the internet. You will be responsible for leading the design, implementation, and scaling of the infrastructure, tooling and systems that support our Search feature.
The ideal candidate should have experience in designing highly scalable infrastructure, building systems, tools and performing testing, monitoring, and maintenance. Our backend stack includes Python, Go, Rust, PostgreSQL, DynamoDB, Redis, and Kubernetes - built alongside dedicated in-house AI and search interfaces.
Responsibilities:
- Design and implement highly available, high-performance, and scalable systems.
- Design and implement various tools for other engineers helping them with their day to day job.
- Design and implement CI/CD and other workflows to enhance stability, robustness and speed of iteration.
- Maintain and optimize key-value and relational databases.
- Scale and load balance web server backends to meet rapidly changing needs.
- Monitor systems and applications, proactively identifying and resolving reliability, scalability, or performance issues.
- Develop monitoring tools, alerts, and dashboards to provide visibility into system health and performance.
Qualifications:
- Strong experience with cloud infrastructure built on AWS.
- Proficient in database management and caching strategies.
- Excellent problem-solving and troubleshooting skills, with the ability to analyze, debug, and resolve complex technical issues.
- Experience working with containers (Docker, Kubernetes) and orchestration tools.
- Excellent communication and collaboration skills.
- Experience with Python and Terraform.
- 3+ years of DevOps/SRE/System Administration experience.
Location: Belgrade; London; Berlin
Perplexity is seeking a DevOps engineer to join our small team in revolutionizing the way people search and interact with the internet. You will be responsible for leading the design, implementation, and scaling of the infrastructure, tooling and systems that support our Search feature.
The ideal candidate should have experience in designing highly scalable infrastructure, building systems, tools and performing testing, monitoring, and maintenance. Our backend stack includes Python, Go, Rust, PostgreSQL, DynamoDB, Redis, and Kubernetes - built alongside dedicated in-house AI and search interfaces.
Responsibilities:
- Design and implement highly available, high-performance, and scalable systems.
- Design and implement various tools for other engineers helping them with their day to day job.
- Design and implement CI/CD and other workflows to enhance stability, robustness and speed of iteration.
- Maintain and optimize key-value and relational databases.
- Scale and load balance web server backends to meet rapidly changing needs.
- Monitor systems and applications, proactively identifying and resolving reliability, scalability, or performance issues.
- Develop monitoring tools, alerts, and dashboards to provide visibility into system health and performance.
Qualifications:
- Strong experience with cloud infrastructure built on AWS.
- Proficient in database management and caching strategies.
- Excellent problem-solving and troubleshooting skills, with the ability to analyze, debug, and resolve complex technical issues.
- Experience working with containers (Docker, Kubernetes) and orchestration tools.
- Excellent communication and collaboration skills.
- Experience with Python and Terraform.
- 3+ years of DevOps/SRE/System Administration experience.
Location: Espoo
Workplace: Hybrid
ROLE HIGHLIGHTS:
- Sovereign Infrastructure Operations Engineer
- Location: Espoo
- Department: IT
- Reports to: Head of IT
- Employment type: Permanent
- Workplace model: Onsite
- Employment is subject to applicable security screening (incl. SUPO, where required)
WHY THIS ROLE MATTERS:
As a Sovereign Infrastructure Operations Engineer, you'll take operational ownership of ICEYE's secure bare-metal infrastructure, virtualization platforms, and production Kubernetes environments, keeping the dedicated air gaped collaboration platform reliable, secure, and audit-ready under some of the strictest information security frameworks in Europe.
WHO WE ARE
ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.
ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.
ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.
Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.
YOUR DAY-TO-DAY RESPONSIBILITIES
- Manage configuration state across physical and virtual assets using GitOps with Infrastructure as Code tools (Git/Gitlab, Ansible, Terraform, or Puppet), removing manual configuration drift in secure environments in alignment with the strict change policies of the given security controls
- Maintain and support production Kubernetes clusters in restricted environments, covering upgrades, storage integration, and registry management
- Administer secure platform core services (Mattermost, Nextcloud, Keycloak, OpenBao), including deployment, upgrades, and integration with local IAM and storage
- Run weekly meetings (change management, vulnerability management) with stakeholders on the infrastructure side
- Maintain technical security controls to satisfy Finnish Katakri, German VS-NfD, and related European frameworks (e.g. NIS2, ISO 27001), including patch management, hardening, and access control
- Maintain secure infrastructure networking (VLAN isolation, mTLS, PKI) and identity integrations, in coordination with network and security teams
- Execute backup and disaster recovery procedures and routine hardware maintenance across air-gapped or high-security sites
WHAT WE’RE LOOKING FOR
Must haves:
- 5+ years hands-on experience in Systems Administration, IT Systems Engineering, or Infrastructure Operations, with a focus on Linux environments
- Practical experience running and maintaining production Kubernetes clusters
- Expert-level Linux administration (Debian/Ubuntu or RHEL/Rocky), including system hardening and vulnerability patching
- Practical knowledge of Katakri, VS-NfD, or equivalent European security/compliance frameworks (ISO 27001, NIS2)
- Solid understanding of enterprise networking fundamentals (VLAN segmentation, firewalls, DNS/DHCP, VPN protocols, PKI)
- Eligibility to obtain and maintain a high-level national security clearance in Finland
Nice to haves:
- Experience with Ceph or ZFS storage systems
- Experience with at least one Infrastructure as Code tool (Ansible, Terraform, or Puppet), with the ability to manage configurations
- Experience with Keycloak, Vault, or internal PKI management
- Familiarity with Kubernetes operations specifically in secure or air-gapped environments
APPLICATION PROCESS
- TA Screen (30 mins)
- Interview with Hiring Manager (30 mins)
- Technical Deep-Dive Interview with Team (60 mins)
- Stakeholder & Security Alignment Interview (30 mins)
WORKING AT ICEYE
At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.
HOW WE WORK (OUR VALUES)
Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.
- Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.
- See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.
- Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.
- Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.
- Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.
BENEFITS
Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.
OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.
We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.
Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.
Компания ищет Senior DevSecOps Engineer для работы в финтех-команде на Кипре в гибридном формате. В обязанности входит проектирование и внедрение безопасной инфраструктуры в AWS и Azure, обеспечение защиты внешнего периметра, управление уязвимостями, организация контроля доступа в облачных сервисах, Active Directory и аудит Kubernetes. Также требуется настройка сбора событий безопасности и улучшение обнаружения угроз, внедрение безопасных конфигураций с помощью Terraform, а также обеспечение безопасности внутренних и клиентских API. Кандидат должен иметь не менее 6 лет опыта в инфраструктуре, облачных платформах или информационной безопасности, из которых минимум 3 года сосредоточены на безопасности. Необходимы практические навыки работы с AWS и Azure в сложных инфраструктурах, глубокое понимание Active Directory, IAM/PAM, SIEM и EDR, опыт использования Terraform, Kubernetes, CI/CD и скриптов. Опыт работы в регулируемых финансовых сервисах и знание защиты криптовалютных платежных систем также являются важными требованиями.
В международную fintech-компанию ищем Senior DevSecOps Engineer.
Практическая инженерная позиция с ответственностью за инфраструктуру и облачную безопасность в сложной среде.
Требования:
— 7+ лет в security
— сильный опыт с AWS, Azure, Terraform, Kubernetes
— опыт с crypto
Условия:
— офис на Кипре (гибрид)
— официальное трудоустройство
— подарки, бонусы от партнеров, корпоративные мероприятия
Задачи:
— развёртывать, настраивать и сопровождать Langfuse в защищённых контурах Банка, включая настройку зависимых компонентов: PostgreSQL, ClickHouse, Redis и объектного хранилища;
— организовывать интеграцию с Apache Kafka: создавать и сопровождать топики, настраивать ACL, consumer groups, retention, репликацию, DLQ/retry-механизмы, мониторить Kafka lag;
— поддерживать потоки телеметрии моделей: результаты работы классических ML-моделей, LLM traces, события RAG-пайплайнов, метрики качества, технические логи и алерты;
— развёртывать и эксплуатировать сервисы в Kubernetes/OpenShift: namespaces, RBAC, Secrets, ConfigMaps, Ingress, resource limits/requests, autoscaling и сетевые политики;
— разрабатывать и сопровождать Helm-чарты, Kubernetes-манифесты и шаблоны конфигурации для dev/test/preprod/prod-контуров;
— строить и поддерживать CI/CD- и GitOps-конвейеры: сборка, тестирование, сканирование, публикация артефактов, деплой и rollback;
— автоматизировать инфраструктуру и конфигурации с использованием Ansible, Terraform или аналогичных средств;
— настраивать мониторинг, централизованное логирование и алертинг: Prometheus, Grafana, Alertmanager, ELK/Opensearch или аналоги;
— сопровождать и проводить первичную оптимизацию PostgreSQL, ClickHouse, Redis, Kafka, Nginx/Ingress и смежных инфраструктурных компонентов;
— обеспечивать отказоустойчивость, резервное копирование, восстановление и планирование ресурсов платформы;
— участвовать в разборе инцидентов, готовить RCA, runbook’и и мероприятия по предотвращению повторных сбоев;
— обеспечивать требования ИБ: управление доступами, секретами, сертификатами, сетевой сегментацией, аудитом и устранением уязвимостей;
— вести эксплуатационную и техническую документацию по сервисам, интеграциям и процедурам сопровождения.
Требования:
— опыт работы DevOps/SRE-инженером от 5-ти лет;
— практический опыт эксплуатации Kubernetes или OpenShift в production-среде: Helm, RBAC, networking, autoscaling, диагностика и настройка ресурсов;
— уверенное знание Linux, Docker, Git, Bash и основ сетевого взаимодействия: TCP/IP, DNS, HTTP(S), TLS, reverse proxy;
— практический опыт работы с Apache Kafka: топики, партиции, репликация, consumer groups, ACL, retention, мониторинг и устранение инцидентов;
— опыт построения и сопровождения CI/CD-пайплайнов на Jenkins, GitLab CI, TeamCity, Argo CD или аналогичных инструментах;
— знание и практическое применение Ansible, Terraform либо других IaC-инструментов;
— опыт настройки мониторинга и observability: Prometheus, Grafana, Alertmanager, централизованное логирование, трассировка;
— опыт эксплуатации PostgreSQL; понимание принципов работы ClickHouse и Redis;
— умение автоматизировать рутинные операции с помощью Python и Bash;
— понимание принципов высоконагруженных и распределенных систем;
— знание подходов к безопасной эксплуатации: управление секретами, сертификатами, доступами, уязвимостями и журналированием действий;
— навыки технической коммуникации: взаимодействие с командами разработки, архитекторами, ИБ, администраторами платформы и владельцами интеграций.
Будет плюсом:
— опыт работы в крупных FinTech-компаниях;
— знание Groovy.
Условия:
— уровень зарплаты обсуждается индивидуально, есть доплаты за менторство и профактивности;
— долгосрочные проекты от российских заказчиков, возможность менять направления, прозрачная система Performance Review;
— релокейт между офисами, выбор формата работы (удалённо, офис, гибрид), адаптация для новых сотрудников;
— доступ к корпоративному порталу, митапам, конференциям (и как гость, и как спикер);
— ДМС со стоматологией, частичная компенсация спорта, бесплатный английский, оплачиваемый отпуск и больничные;
— тимбилдинги, детские праздники, внутренние мероприятия;
— офисы в Москве, Санкт-Петербурге, Казани, Нижнем Новгороде, Самаре.
Location: European Union, Kazakhstan, Georgia, Armenia, Serbia
Company Intro
At
Toloka AI
we create data that powers leading GenAI models and innovations. We work with frontier labs, big tech, renowned AI startups, enterprises and non-profit research organizations worldwide. We use a combination of Experts + Crowd + Tech Platform to teach AI models to reason and evaluate their efficacy and safety. We have experts in more than 50 different domains—from doctors and lawyers to physicists and engineers—and boast one of the most diverse global crowds,
representing over
100 countries and speaking 40+ languages
. We are a well-funded startup with an enviable portfolio of clients including
Anthropic
,
Amazon
,
Microsoft
,
poolside
,
Recraft
, and
Shopify
.
Recently, we secured strategic investment led by
Bezos Expeditions
with participation from
Mikhail Parakhin
,
CTO of Shopify
and board advisor to leading GenAI companies, who now serves as our Chairman of the Board. Our remote-first team is globally distributed around the world:
USA
,
UK
,
the Netherlands
,
Serbia
, and more. We are headquartered in Amsterdam.
About the Position
Toloka is growing rapidly, adding new platforms and infrastructure across multiple cloud environments. We are hiring a senior, hands-on security engineer to own infrastructure security and vulnerability management: Kubernetes and service-mesh security, cloud hardening, and vulnerability remediation.
This is a senior, self-directed role.
It requires the ability to define scope and drive execution independently, with ownership of core security tooling and processes from day one.
What you'll actually do
Own vulnerability management.
Operate and maintain the vulnerability-management platform. Ensure container images are scanned and patched on a defined cadence. Maintain supply-chain scanning tooling and its severity-classification configuration. Define and enforce remediation SLAs.
Own cloud security across multiple providers.
AWS, GCP, and Azure hardening, logging, and service-account governance.
Own Kubernetes and service-mesh security.
Operate the service mesh and maintain the policy-as-code rollout so that policy is enforced automatically.
Audit and secure infrastructure in newly added environments.
Review build pipelines and infrastructure in newer parts of the business as they come online, and remediate findings.
Contribute to security architecture and design review.
Review new integrations and internal systems, including AI agents running in production, for security risk.
Support workforce and endpoint security.
Contribute to VDI and browser-isolation initiatives as the program matures.
Use agentic tooling in your workflow.
Use coding agents for first-pass review of infrastructure-as-code, container configuration, and cloud policy, verifying findings against source configuration before acting on them.
Key Priorities for the First 6 Months
The first six months focus on establishing full ownership of infrastructure and vulnerability management.
Weeks 1–2
- Onboard to the cloud environment, Kubernetes architecture, and existing security tooling.
Month 1
- Establish ownership of the vulnerability-management process; findings triaged and remediated on a defined cadence.
Month 2
- Complete configuration of supply-chain scanning tooling; implement automated image scanning and patching; deploy initial policy-as-code rules.
Month 3
- Complete policy-as-code rollout in at least one environment; begin infrastructure audits in newly added environments.
Month 4
- Close outstanding cloud logging and service-account gaps; establish and enforce a documented multi-cloud hardening baseline.
Months 5–6
- Full ownership of infrastructure and cloud security as a domain; independently deliver security-architecture design reviews.
Core Tech Stack
Kubernetes and service mesh, policy-as-code tooling (Kyverno/OPA), Terraform, AWS/GCP/Azure, vulnerability-management and supply-chain scanning platforms, container tooling, CI/CD, and Git. Detections and access rules are managed as code through pull requests. Familiarity with coding/agentic tools for infrastructure review is expected.
What We Evaluate
Production experience hardening cloud infrastructure
- IAM, logging, service accounts, network security, on at least one major cloud provider (multi-cloud experience is a plus).
Kubernetes and container security
- service mesh (Cilium, Istio, or similar) and policy-as-code (Kyverno, OPA, or similar).
Vulnerability-management experience
- SCA/SAST tooling and SLA-driven remediation practice.
Fluency with coding agents
- experience using agentic tools for infrastructure-as-code review or investigation work, and verifying their output.
Ability to work independently at a senior level
- defining scope and priorities without detailed direction.
Clear written and verbal communication
- able to run design reviews and communicate risk to engineers and leadership.
Nice to Have, None Required
Experience securing multi-tenant or multi-identity-domain environments; supply-chain security tooling (SBOM, Socket, JFrog, or similar); secure-SDLC or AppSec experience; Terraform/IaC at scale; relevant certifications (e.g. AWS/GCP/Azure security specialties, CKS).
What We Can Offer
Contract (B2B) collaboration
, with a path into a project team if things go well;
Flexible, fully remote schedule (
40 hours per week
);
Work at the leading edge of AI development, alongside a dedicated and dynamic team of experts;
Projects with customers that are AI industry leaders and well-known household names;
Friendly community.
[Important Notice] Scam Alert Regarding Fake Job Postings
It has come to our attention that an individual or group is fraudulently impersonating Toloka to post fake jobs and solicit personal information from applicants.Please be aware:
Official Communication:
Our recruiting team will
only
contact you from an official "
toloka.ai
" email address. We will NEVER use Gmail, Yahoo, Tolokainc, toloka.inc, or other personal or seemingly business email accounts.
Our Process:
We will
never
ask for your bank account details, credit card number, or any fees as part of the application or interview process.
Official Listings:
All legitimate job openings are posted on our official careers page:
https://toloka.ai/careers#job-list
What to do:
If you see a suspicious job posting or have been contacted by someone you suspect is a scammer, please do not provide any personal information. Instead, report the incident to us directly at
security@toloka.ai
and report the profile/post to LinkedIn.We are taking this matter very seriously and are working with the appropriate parties to resolve it.
Thank you for your vigilance!
To learn how we collect, use, disclose, and store personal data, check out our
Privacy Notice
.
Location: United States
We're looking for a
Salesforce technical architect and engineering manager
who can drive development velocity across a team of 10 to 15 engineers building enterprise applications on the Salesforce Platform. This is a hybrid role combining deep hands on technical leadership with people management. We're specifically looking for candidates with strong Salesforce expertise, Salesforce technical architecture experience, and Node.js development experience.
What you'll do
Lead the architecture, performance, and scalability of our Salesforce Platform and Node.js based services. While our applications are deployed primarily on AWS today, they are designed to be scalable and highly available, and you'll ensure architectural decisions follow Salesforce and cloud engineering best practices.
You'll own the technical direction of our Salesforce applications, mentor senior engineers, and partner with Product and Engineering leadership to deliver high quality solutions quickly.
You'll also manage a team of 10 to 15 developers by setting goals, conducting 1:1s, growing careers, hiring top engineering talent, and removing blockers. You'll balance roadmap delivery with engineering excellence, including code quality, system reliability, platform performance, security, and developer experience.
Requirements
What we're looking for
8+ years of software engineering experience, with 3+ years leading engineering teams.
Strong Salesforce expertise, including Apex, Lightning Web Components, SOQL, Salesforce APIs, and Salesforce platform best practices.
Proven Salesforce technical architecture experience designing scalable enterprise solutions.
Strong Node.js background and a clear point of view on building maintainable services and integrations at scale.
Experience integrating Salesforce with external systems using modern APIs and integration patterns.
Deep understanding of software architecture, scalability, security, and performance optimization.
Track record of improving engineering velocity, system performance, scalability, and deployment processes in production environments.
Proven ability to grow engineers, hire well, and lead high performing engineering teams that consistently deliver results.
Nice to have
Experience with Salesforce DevOps, CI/CD pipelines, and deployment automation.
Experience with AWS, cloud infrastructure, or enterprise SaaS platforms.
Experience with Kubernetes, Terraform, or containerization technologies.
Salesforce certifications such as Platform Developer I or II, Application Architect, or System Architect.
Background scaling SaaS platforms or developer facing products.
Location: Ukraine
We're looking for a
Salesforce technical architect and engineering manager
who can drive development velocity across a team of 10 to 15 engineers building enterprise applications on the Salesforce Platform. This is a hybrid role combining deep hands on technical leadership with people management. We're specifically looking for candidates with strong Salesforce expertise, Salesforce technical architecture experience, and Node.js development experience.
What you'll do
Lead the architecture, performance, and scalability of our Salesforce Platform and Node.js based services. While our applications are deployed primarily on AWS today, they are designed to be scalable and highly available, and you'll ensure architectural decisions follow Salesforce and cloud engineering best practices.
You'll own the technical direction of our Salesforce applications, mentor senior engineers, and partner with Product and Engineering leadership to deliver high quality solutions quickly.
You'll also manage a team of 10 to 15 developers by setting goals, conducting 1:1s, growing careers, hiring top engineering talent, and removing blockers. You'll balance roadmap delivery with engineering excellence, including code quality, system reliability, platform performance, security, and developer experience.
Requirements
What we're looking for
8+ years of software engineering experience, with 3+ years leading engineering teams.
Strong Salesforce expertise, including Apex, Lightning Web Components, SOQL, Salesforce APIs, and Salesforce platform best practices.
Proven Salesforce technical architecture experience designing scalable enterprise solutions.
Strong Node.js background and a clear point of view on building maintainable services and integrations at scale.
Experience integrating Salesforce with external systems using modern APIs and integration patterns.
Deep understanding of software architecture, scalability, security, and performance optimization.
Track record of improving engineering velocity, system performance, scalability, and deployment processes in production environments.
Proven ability to grow engineers, hire well, and lead high performing engineering teams that consistently deliver results.
Nice to have
Experience with Salesforce DevOps, CI/CD pipelines, and deployment automation.
Experience with AWS, cloud infrastructure, or enterprise SaaS platforms.
Experience with Kubernetes, Terraform, or containerization technologies.
Salesforce certifications such as Platform Developer I or II, Application Architect, or System Architect.
Background scaling SaaS platforms or developer facing products.
УдалённоUkraine
УдалённоseniorГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Автоотклики