Location: San Francisco, CA | New York City, NY
About Anthropic
Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems.
About the role
The IT Operations team keeps Anthropic running. We make sure every employee can do their best work without friction. We're hiring an IT Operations Engineer to develop our global asset management and hardware lifecycle program across our offices in San Francisco, New York, Seattle, London, Dublin and Sydney. You will bring program expertise to how we track hardware as inventory through its whole life: procurement and receiving, the inventory of record, assignment, refresh, collection and recovery, e-waste and secure disposal, and reseller relationships, iterating and scaling practices as we mature. The same person runs day-to-day operations for our corporate mobile program in addition to expertise in management of laptop and workstation lifecycle operations.
You'll partner with several teams within the IT, Security and business operations organizations: IT Hardware Ops runs procurement, fleet logistics, onboarding and offboarding, the storage room, and physical intake. The Endpoint pod owns MDM, device policy and enrollment. Finance owns the budget and vendor contracts. Hardware requests that come through the IT Support queue land with the IT Support team, and you'll help define how they are handled.
Responsibilities
Strategy and Tooling
Develop the global asset management strategy: the lifecycle model, the data we keep on every device, and how each office executes against it
Select, implement and administer the asset management tool, define its data model and integrations, and partner with IT Engineering where the work needs platform-level access
Contribute to and develop the processes on-site engineers in each office execute against, including the storage room process
Support the evaluation and onboarding of a hardware lifecycle services vendor and, once in place, run the day-to-day relationship
Inventory and Assignment
Establish the inventory of record across systems and keep it accurate, from receiving through disposal: every device, its state, its location, and who has it
Run audits of who-has-what and reconcile physical counts against the system of record
Manage demo, loaner, and travel device inventories, ensuring devices are accurately tracked through complex logistical deployments
Maintain up-to-date inventory counts and make strategic purchasing decisions in support new hire onboarding and peripherals stock levels
Procurement and Refresh
Support hardware purchasing through our reseller and vendor relationships, working from the refresh calendar
Build out the refresh calendar and advance it across offices
Reconcile purchase orders, deliveries and invoices with Accounting and vendors so that what was ordered, received, and billed line up
Collection, E-waste and Disposal
Develop device collection and recovery workflows: offboarding returns, refresh swaps, remote-employee returns and the BPO fleet, including the shipping and tracking that goes with them
Build the e-waste program: certified recycling and secure disposal partners in each region, data destruction records, and the chain of custody from collection to certificate
Handle equipment under legal hold or other chain-of-custody requirements
BPO and Contingent Fleet
Provision, track and recover the device fleet for our BPO partners, and be the day-to-day hardware contact for those vendors
Corporate Mobile
Run day-to-day operations for the corporate mobile program and write its runbook
Manage deployment, break-fix, and carrier relationships associated with a mobile device fleet
Automation
Identify repetitive work throughout the operation and automate it with the tools at hand (scripts, systems integrations / connectors, AI tools)
You may be a good fit if you
Have implemented an asset management and lifecycle program for a multi-office fleet, not only run one: taken it from spreadsheets or nothing to a system of record and defined the processes around it (procurement, inventory, assignment, refresh, collection and disposal), ideally in a fast-paced or high-growth environment
Have selected or implemented an asset management platform such as Jira Assets, Snipe-IT or similar, and developed the data model
Have run an e-waste or secure disposal program with certified partners and chain-of-custody records
Have managed reseller or vendor relationships for hardware purchasing and asset disposal
Write things down: runbooks, how-to guides and knowledge base articles
Recognize when a request reaches past this role and route platform work to IT Engineering, policy to the Endpoint pod, and budget to Finance
Strong candidates may also
Have supported a corporate mobile program or carrier account
Have basic scripting experience (Bash or Python) for inventory or reporting automation
Have experience using AI tools to improve personal or team productivity
Have been the hands-on asset contact for an ISO 27001 or SOC 2 audit: pulled extracts from the register, produced disposal certificates and evidence of returned assets
Deadline to apply: None. Applications will be received on a rolling basis.
The annual compensation range for this role is listed below.
For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role.
Annual Salary:
$180,000
—
$230,000 USD
Logistics
Minimum education:
Bachelor’s degree or an equivalent combination of education, training, and/or experience
Required field of study:
A field relevant to the role as demonstrated through coursework, training, or professional experience
Minimum years of experience:
Years of experience required will correlate with the internal job level requirements for the position
Location-based hybrid policy:
Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices.
Visa sponsorship:
We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this.
For roles performing work in California:
We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.
We encourage you to apply even if you do not believe you meet every single qualification.
Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team.
Your safety matters to us.
To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit
anthropic.com/careers
directly for confirmed position openings.
How we're different
We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills.
The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences.
Come work with us!
Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues.
Guidance on Candidates' AI Usage:
Learn about
our policy
for using AI in our application process.
Задачи:
— Администрировать продуктивные и тестовые кластеры ClickHouse, контролировать состояние шардов, реплик, Distributed-таблиц и ReplicatedMergeTree-таблиц;
— Диагностировать replication queue, merges, mutations, inserts, деградацию запросов и проблемы с дисковой подсистемой;
— Анализировать системные таблицы ClickHouse и состояние кластера;
— Участвовать в изменении топологии кластера: добавление шардов, реплик, серверов, изменение Distributed-таблиц;
— Планировать горизонтальное масштабирование ClickHouse-кластера;
— Оптимизировать схемы данных, партиционирование, ключи сортировки, TTL, индексы, storage policy и настройки сервера;
— Работать с хранением данных: локальные диски, LUN, DAS, hot / warm storage, S3-совместимое хранилище;
— Прорабатывать дедупликацию данных, повышение уровня сжатия и механизм токенизации / full text search по событиям;
— Настраивать и сопровождать ClickHouse Keeper / ZooKeeper;
— Настраивать TLS/SSL для клиентских подключений и межсерверного взаимодействия;
— Разрабатывать и проверять backup/restore и disaster recovery;
— Настраивать мониторинг, алерты и дашборды по ClickHouse;
— Готовить Ansible playbooks / roles, runbook’и, инструкции, чек-листы и технические отчёты.
— Администрировать продуктивные и тестовые инсталляции MariaDB;
— Контролировать состояние серверов, репликации, соединений, транзакций, блокировок и фоновых процессов;
— Настраивать и сопровождать репликацию: master-slave, master-master, GTID-based replication;
— Диагностировать replication lag, ошибки SQL thread / IO thread, рассинхронизацию данных и конфликты при master-master-схемах;
— Участвовать в миграции MariaDB с master-master-репликации на Galera Cluster;
— Настраивать, сопровождать и диагностировать Galera Cluster;
— Прорабатывать HA-архитектуру MariaDB: failover, fencing, VIP / proxy layer, split-brain-риски;
— Разрабатывать и проверять disaster recovery-сценарии, RPO / RTO и восстановимость резервных копий;
— Анализировать производительность: slow queries, EXPLAIN, индексы, locks, deadlocks, buffer pool, connection pool, disk IO;
— Оптимизировать конфигурацию MariaDB с учётом нагрузки, объёма данных, RAM, CPU, дисковой подсистемы и сети;
— Настраивать TLS/SSL для клиентских подключений и репликации;
— Настраивать мониторинг, алерты, дашборды и runbook’и по MariaDB.
— Участвовать в расследовании production-инцидентов, связанных с ClickHouse, MariaDB, Linux, сетью или дисковой подсистемой;
— Анализировать метрики, логи, системные таблицы, состояние репликации, блокировки, диски, сеть и конфигурации;
— Формулировать технические гипотезы, проверять их и отделять первопричину от сопутствующих факторов;
— Готовить технические выводы по итогам инцидентов и участвовать в postmortem-разборах;
— Разворачивать тестовые стенды ClickHouse и MariaDB для проверки архитектурных решений;
— Проверять обновления, изменение топологии, расширение хранилища, storage policy и параметры ClickHouse / MariaDB до применения в production;
— Автоматизировать типовые операции через Ansible / Bash / Python / Terraform или аналогичные инструменты;
— Взаимодействовать с заказчиками, объяснять технические риски понятным языком, предлагать решения и лидировать технические обсуждения.
Требования:
— Практический опыт промышленной эксплуатации ClickHouse;
— Понимание архитектуры ClickHouse: shards, replicas, Distributed tables, ReplicatedMergeTree, MergeTree family;
— Опыт диагностики replication queue, merges, mutations, insert/select latency, деградации запросов и проблем с дисковой подсистемой;
— Понимание партиционирования, ключей сортировки, TTL, storage policies, disks, volumes, data skipping indexes;
— Опыт изменения топологии ClickHouse-кластера или глубокое понимание порядка и рисков таких изменений;
— Опыт настройки TLS/SSL для ClickHouse;
— Опыт эксплуатации MariaDB в продуктивной или близкой к продуктивной среде;
— Понимание MariaDB, InnoDB, транзакций, индексов, блокировок, deadlocks, isolation levels;
— Опыт настройки и диагностики репликации MariaDB;
— Понимание GTID, binary logs, relay logs, replication lag, failover и рисков master-master-репликации;
— Опыт настройки backup/restore MariaDB и проверки восстановимости резервных копий;
— Опыт диагностики производительности MariaDB: slow query log, EXPLAIN, индексы, locks, buffer pool, disk IO;
— Опыт эксплуатации Linux-серверов;
— Понимание влияния CPU, RAM, disk IO, network и filesystem на работу ClickHouse и MariaDB;
— Опыт настройки мониторинга и алертов для ClickHouse, MariaDB и инфраструктуры;
— Опыт работы с Prometheus, Grafana, Zabbix или аналогичными системами мониторинга;
— Опыт автоматизации через Ansible, Bash, Python или аналогичные инструменты;
— Умение аккуратно проводить изменения в production: план работ, оценка рисков, rollback-план, проверка результата;
— Умение писать техническую документацию: инструкции, runbook’и, чек-листы, postmortem-отчёты.
Желательные требования:
— Опыт или уверенное понимание Galera Cluster;
— Опыт эксплуатации ClickHouse и MariaDB в составе SIEM, SOC, log management, observability, telemetry или других высоконагруженных систем;
— Опыт работы с большими объёмами данных: десятки или сотни ТБ;
— Опыт работы с ClickHouse Keeper или ZooKeeper;
— Опыт эксплуатации ClickHouse / MariaDB на bare metal;
— Опыт работы с LUN, DAS, локальными дисковыми массивами и S3-совместимыми объектными хранилищами;
— Опыт нагрузочного тестирования ClickHouse и MariaDB;
— Опыт построения процедур disaster recovery;
— Опыт подготовки архитектурных и эксплуатационных документов для заказчиков;
— Опыт работы с ProxySQL, MaxScale, HAProxy, Keepalived, Pacemaker / Corosync или аналогичными решениями;
— Опыт проведения регламентных работ с минимальным downtime;
— Опыт аудита продуктивных инсталляций у заказчиков.
Условия:
— Постоянная занятость;
— Работа с продуктивной, тестовой и лабораторной инфраструктурой;
— Взаимодействие с командой эксплуатации, инженерами SIEM, разработчиками, архитекторами и техническими представителями заказчика;
— Участие в планировании изменений, разборе инцидентов и развитии архитектуры хранения данных.
Задачи:
— Создание и поддержка кластеров: Kubernetes, Kafka, Greenplum, Cassandra, Hadoop, Apache Ozone
Требования:
— Опыт работы DevOps-инженером от 7 лет
— Установка и администрирование ОС Linux / Ubuntu / Talos
— Работа на уровне железа/сети: обновление прошивок сетевых карт, настройка бондинга (bonding)
— Глубокое понимание принципов DevOps и выстроенных процессов CI/CD
— Опыт работы с системами управления конфигурациями (Ansible) и оркестраторами
— Уверенная автоматизация рутинных процессов на Python и Bash
— Навыки написания скриптов автоматизации и опыт разработки веб-сервисов (API) на Python
— Отличное владение Docker и Git
— Опыт администрирования реляционных баз данных на уровне администратора
— Опыт работы с Apache Ozone
Условия:
— null
ОфисseniorГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Location: PL
Workplace: remote
Overview:
SOFTSWISS is hiring a Senior SOC Detection Engineer to join our Security Operations team. We are seeking a hands-on security professional to help build and develop our detection engineering function, strengthening the company’s ability to identify, investigate, and respond to security threats across Windows, Linux, and Kubernetes environments.
Purpose of the role:
You will be responsible for owning the full lifecycle of security detections, from researching attack techniques and defining logging requirements to developing, testing, deploying, and continuously improving detection content in Splunk. Your work will help enhance detection coverage, improve telemetry quality, reduce false positives, and ensure that security teams can reliably identify and respond to real threats.
Key responsibilities:
Develop, test, deploy, and maintain detection and correlation rules in Splunk or a similar SIEM.
Translate incident investigations, threat hunting, and attack research into effective detections.
Analyze false positives, false negatives, and detection gaps.
Improve detection coverage and map detections to MITRE ATT&CK techniques.
Develop and optimize SPL queries, dashboards, reports, and risk-based detections.
Define requirements for logging, parsing, normalization, enrichment, and data quality.
Develop monitoring and health checks for detection rules and data sources.
Contribute to automated detection testing, synthetic events, telemetry replay, and CI/CD workflows.
Participate in incident investigations, threat hunting, purple team exercises, and attack emulation.
Collaborate with SOC, Incident Response, Threat Intelligence, Infrastructure, and Engineering teams.
Document detection logic, data sources, dependencies, limitations, and expected behavior.
Required Experience:
Strong hands-on experience in SOC, Detection Engineering, Threat Hunting, Incident Response, or a related field.
Deep understanding of MITRE ATT&CK, common attack techniques, and detection methodologies.
Strong proficiency in Splunk SPL or another enterprise SIEM platform.
Experience developing complex queries, correlations, dashboards, and reports.
Practical experience tuning detections and managing exceptions and allowlists.
Ability to define and evaluate logging and telemetry requirements.
Proficiency in Python, PowerShell, or Bash for automation.
Experience with Git, code reviews, APIs, and basic CI/CD practices.
Understanding of Windows and Linux security monitoring.
Ability to independently investigate complex problems and drive solutions to completion.
Strong communication skills and the ability to work effectively across teams.
Nice to have:
Experience with Splunk Enterprise Security, CIM, data models, macros, and lookups.
Experience with Sysmon, Windows security auditing, Active Directory, auditd, osquery, Tetragon, Docker, or Kubernetes.
Experience with YARA, CALDERA, Shuffle, or other security automation and attack emulation tools.
Experience building detection quality metrics and automated validation frameworks.
Experience with Terraform, Ansible, or other infrastructure-as-code tools.
Participation in security research, conferences, or the broader security community.
Our technology focus:
Splunk Enterprise Security, MITRE ATT&CK, Windows and Linux telemetry, Kubernetes and container logs, Python, PowerShell, Bash, Git, and CI/CD.
Learn more about our hiring process
here (
link
)
– what to expect, how to prepare, and what makes SOFTSWISS different.
Main Advantages
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Требуется системный администратор уровня L2 для работы в офисе на Кипре, который будет заниматься поддержкой серверной и сетевой инфраструктуры. В обязанности входит администрирование систем на базе Linux, а также платформ Proxmox VE и pfSense. Необходимо осуществлять мониторинг с помощью Zabbix, выявлять и устранять неисправности, обеспечивать поддержку сетевых соединений и систем хранения данных, выполнять резервное копирование и обновления. Важной частью работы является ведение документации по изменениям и передача сложных задач на уровень L3. Кандидат должен уверенно владеть Linux и сетевыми технологиями, включая TCP/IP, DNS, маршрутизацию, VLAN, NAT, VPN, а также иметь представление о VXLAN. Опыт работы с Proxmox VE, Zabbix, pfSense или их аналогами обязателен. Также требуется знание LVM, RAID, процедур резервного копирования и восстановления, а также инструментов для диагностики. Для автоматизации задач необходимы навыки программирования на Bash и опыт безопасного обслуживания production-среды. Дополнительным преимуществом будет опыт с Proxmox HA, Ceph, Ansible, Docker, централизованным логированием и поддержкой инфраструктуры в режиме 24/7.
Требования к кандидату:
— Опыт работы DevOps-инженером от 7 лет;
— Установка и администрирование ОС Linux / Ubuntu / Talos;
— Работа на уровне железа/сети: обновление прошивок сетевых карт, настройка бондинга (bonding);
— Создание и поддержка кластеров: K8s, Kafka, Greenplum, Cassandra, Hadoop, Apache Ozone;
— Глубокое понимание принципов DevOps и выстроенных процессов CI/CD;
— Опыт работы с системами управления конфигурациями (Ansible) и оркестраторами;
— Уверенная автоматизация рутинных процессов на Python и Bash;
— Навыки написания скриптов автоматизации и опыт разработки веб-сервисов (API) на Python;
— Отличное владение Docker и Git;
— Опыт администрирования реляционных баз данных на уровне администратора.
УдалённоseniorГеография найма не уточнена, офис: Россия
Location: Baku, Azerbaijan
DevOps Engineer
Location
: Baku, Azerbaijan
Type
: Full-time
Company
: DRL LLC
About eiGroup
At eiGroup, we believe ideas can change industries - but only if they are nurtured with structure, science, and courage.
We’re an
R&D and Innovation Venture Studio
that transforms human ingenuity into technological value that scales.
Our ecosystem brings together researchers, engineers, and creators who turn complex challenges into scalable products - from subsurface imaging to AI-driven analytics, from remote sensing to digital transformation.
Our ventures are built in-house, born from research, and grown into independent companies.
Together, we’re shaping how innovation takes root in this region - and how it reaches the world.
What You'll Do
Own CI/CD across Azure Pipelines and GitLab CI: YAML pipelines, multi-stage builds, environment promotion, approvals, artifact and container publishing, shared templates so each team isn't reinventing its own build
Provision and run our Kubernetes clusters, including standing up new ones from scratch with Rancher: workloads, ingress, secrets, resource limits, autoscaling, rollout and rollback strategy, Helm charts, version upgrades and etcd backups
Own our Azure estate — App Services, compute, networking, storage, Key Vault, managed identities — alongside self-hosted services running on our own infrastructure, including cost hygiene and right-sizing
Introduce Infrastructure as Code (Terraform or Bicep) from a largely manual starting point: reusable modules, state management, real parity between environments
Build and maintain monitoring and alerting: metrics collection, Grafana dashboards the teams actually use, centralised logging, and alerts that fire on real problems rather than noise
Own production: releases, incident response, root cause, backup and restore drills, and an on-call rotation designed to stay quiet
Manage secrets and access properly (Key Vault, managed identities, Entra ID, least-privilege RBAC) and put secret, dependency and image scanning into the pipelines
Work with the Project Managers across our ventures: take in infrastructure requests, prioritise them honestly against each other, and propose the cheaper version when there is one
Plan and report your work in Azure DevOps — break requests into tasks, create your own where the work originates with you, keep status current, and raise blockers early enough that PMs can plan around them
What You Bring
3+ years in DevOps, SRE or platform engineering, with real production ownership
Strong hands-on Linux — comfortable in the shell, able to debug a failing service without a UI
Proven CI/CD experience with Azure Pipelines, GitLab CI or equivalent, including pipelines other teams depend on
Kubernetes in production: deployments, services, ingress, config and secrets, RBAC, autoscaling — and the ability to diagnose why a pod won't start or a rollout is stuck. Helm for packaging. You have built a cluster from scratch, not only deployed into one
Solid Docker fundamentals: multi-stage builds, image size, base image hygiene
Microsoft Azure: compute, networking, storage, Key Vault, managed identities, Entra ID, Azure Monitor
Infrastructure as Code with Terraform or Bicep — nice to have
Scripting in Bash plus Python or PowerShell — enough to automate a task properly instead of documenting a manual one
Networking fundamentals: DNS, TLS and certificates, reverse proxies, load balancing, VNets, subnets, NSGs, firewall rules
Databases from the operations side: backups and tested restores, connection pooling, working with developers on a slow query
Sound security instincts — you notice the exposed secret, the public endpoint, the permission nobody needed
Able to serve multiple teams with competing requests, work independently, estimate credibly and flag risk early
Good written and verbal communication in English
Our benefits include:
Medical insurance (family coverage)
Flexible working hours
Wellness program
Childcare support
Company-provided lunch
Проект: Телеком
Требования:
Опыт работы DevOps от 7 лет
Установка и администрирование ОС Linux/Ubuntu/Talos
Обновление прошивок сетевых карт, настройка бондинга
Создание и поддержка кластеров Kubernetes, Kafka, Greenplum, Cassandra, Hadoop, Apache Ozone
Понимание принципов работы DevOps, процессов CI/CD
Опыт работы с системой управления конфигурацией Ansible
Опыт работы с оркестраторами
Автоматизация на Python, bash
Навыки работы с Docker
Умение работать с git
Опыт написания веб сервисов (api) на python
Написание скриптов по автоматизации на python
Опыт работы с реляционными БД на уровне администратора
Очень важен опыт с Apache Ozone
Условия:
ИП до 1300 руб/час (фуллтайм)
Сроки проекта: 6 мес (с возможной пролонгацией)
Гражданство РФ и локация РФ (удаленка)
Потребуется оформление по ТК РФ по совместительству для доступов
Задачи:
- Проектирование и разработка высоконагруженных микросервисных систем с нуля (архитектура, выбор стека, декомпозиция).
- Развитие существующего функционала: рефакторинг, оптимизация узких мест, миграция данных.
- Интеграция и контрактное взаимодействие: разработка и документирование API (REST/AsyncAPI/gRPC), обеспечение бесшовного взаимодействия между десятками сервисов.
- Code Review и менторство: повышение качества кода в команде, внедрение best practices.
- Работа с инфраструктурой: участие в настройке CI/CD, оптимизация Docker-образов, взаимодействие с оркестрацией (Kubernetes/Swarm).
Требования:
- Опыт коммерческой разработки на Python от 4 лет (в идеале от 5 лет), участие в полном жизненном цикле крупных проектов.
- Глубокое понимание асинхронности: работа event loop, конкурентность, параллелизм, специфика GIL.
- Уверенное знание FastAPI, асинхронного SQLAlchemy, Pydantic.
- Экспертный уровень работы с СУБД: написание и оптимизация сложных запросов (EXPLAIN, индексы, партиционирование), проектирование схем данных с учетом нагрузок.
- Опыт построения Event-Driven Architecture поверх RabbitMQ или Kafka, понимание гарантий доставки (at-least-once, exactly-once), работа с DLQ.
- Инфраструктурный кругозор: уверенная работа с Linux (bash, сеть, процессы), опыт контейнеризации (Docker).
- Архитектурное мышление: понимание SOLID, паттернов микросервисной архитектуры (API Gateway, Circuit Breaker, Saga), умение аргументировать технологический выбор.
Будет плюсом:
- Опыт в финтехе или высоконагруженных проектах.
- Навыки настройки мониторинга и логирования (Prometheus, Grafana, ELK).
Условия:
- Оформление по договору ГПХ или ИП (РФ) с компенсацией налога.
- Оплачиваемые отпуска и больничные.
- Горизонтальная культура управления и отсутствие микроменеджмента.
- В процессе отбора предусмотрено небольшое неоплачиваемое тестовое задание.
Задачи:
— Документировать и наполнять базы знаний (Jira/Confluence)
— Разработка и актуализация HLD/LLD
— Решать типовые задачи, обрабатывать инциденты совместно с архитекторами/экспертами
— Осуществлять подготовку deplоyment-приложений для установки их в кластер
— Автоматизировать рутинные процессы
— Поддерживать пользователей и помогать им в выполнении шаблонных задач
— Разработка автоматизации и средств мониторинга на Python
Обязательные навыки:
— Опыт в роли от 3 лет
— Установка и администрирование ОС Linux/Ubuntu
— Создание и поддержка кластеров K8s, Kafka, Greenplum, Cassandra
— Понимание принципов работы DevOps, процессовCI\CD
— Опыт работы с системой управления конфигурацией (Ansible)
— Опыт работы с оркестраторами
— Опыт настройки мониторинга и алертинга
— Автоматизация на Python, bash
— Навыки работы с Docker
— Умение работать c git
— Опыт написания веб сервисов (api) на python
— Написание скриптов по автоматизации на python
— Опыт работы с реляционными БД (Oracle, ClickHouse, PostgreSql) на уровне администратора
Location: Distributed
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations
Germany
Responsibilities
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
Desirable Skills, Knowledge, and Experience
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Business Fluency in German
Bonus Points
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Compensation
For Germany based hires: Estimated annual salary is between €116,000 - €182,000.
This role is eligible to earn incentive compensation under Cloudflare's Sales Compensation Plan. The estimated annual salary range includes the on-target incentive compensation that may be attained in this role under the Sales Compensation Plan.
Equity: This role is eligible to participate in Cloudflare's equity plan.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Требования:
— Опыт работы DevOps от 7 лет
— Установка и администрирование ОС Linux/Ubuntu/Talos
— Обновление прошивок сетевых карт, настройка бондинга
— Создание и поддержка кластеров Kubernetes, Kafka, Greenplum, Cassandra, Hadoop, Apache Ozone
— Понимание принципов работы DevOps, процессов CI/CD
— Опыт работы с системой управления конфигурацией Ansible
— Опыт работы с оркестраторами
— Автоматизация на Python, bash
— Навыки работы с Docker
— Умение работать с git
— Опыт написания веб сервисов (api) на Python
— Написание скриптов по автоматизации на Python
— Опыт работы с реляционными базами данных на уровне администратора
Location: Distributed
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations
Germany
Responsibilities
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value. You'll guide startup and AI customers from the first conversation about their AI ambitions through technical validation, production deployment, and long-term adoption and expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the Startup AI segment.
Technical Discovery & Validation:
Partner closely with Account Executives to lead technical deep-dive discovery and uncover what kind of AI problem a customer actually has. It might be building AI products and agents, governing how their people and agents use AI, or protecting internet-facing applications from AI-driven threats and traffic. Turn that into a sequenced plan rather than a feature tour. Capture business requirements and map startup and AI customer infrastructure (DNS, CDN, Zero Trust, Network Security, serverless and edge compute) to fit-for-purpose Cloudflare architectures and bespoke solutions. Define scope, success criteria, and technical evaluation plans for Proofs of Concept (PoCs) and Technical Validations, anchored in measurable quality, latency, and cost targets rather than subjective impressions. Rapidly build working, customer-specific prototypes. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, reliability, and scale challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional Services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Oversee technical onboarding and implementation without executing it yourself, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer's environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance). Act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Guide customers in taking AI applications and agents from prototype to production in a way that is reliable, safe, and affordable. That covers durable state and failure recovery for long-running agents; secure agent design such as defenses against prompt injection, scoped access, and human approval for sensitive actions; and the right model choices for each task. After go-live, help customers keep AI workloads healthy through tracing, quality and cost monitoring, and safe rollout of model and prompt changes, feeding production learnings back into evaluation. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk as customers move from early-stage development to production scale.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data and the evolving needs of startup and AI customers. Translate AI spend into clear business cases, such as cost per task or per resolved request. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for founders, C-level executives, and engineering leaders.
Ecosystem & Business Development:
Help build and grow Cloudflare's presence in the startup and AI ecosystem. Develop relationships with incubators, accelerators, venture capital firms, founder communities, and developer meetups to generate new pipeline alongside Account Executives. Represent Cloudflare at startup events, demo days, and hackathons, and identify high-potential AI startups early in their journey.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with founders, CTOs, engineering leaders, and other key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, agent design, AI governance and compliance (e.g. GDPR, EU AI Act, data residency), security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Use AI agents, coding agents, Large Language Models (LLMs), and internal platforms as a default way of working. Automate routine tasks such as meeting preparation, RFP/Security Questionnaire responses, sandbox provisioning, demo setup, basic telemetry monitoring, and internal/external documentation, so you have more time for strategic customer advisory. Apply AI-assisted workflows to support customer engineering teams and improve the speed and quality of technical validation. Share hands-on learnings and gaps with product teams as a direct feedback channel.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization. Support technical enablement for startup and AI customers through workshops, code samples, documentation, and developer onboarding.
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
Desirable Skills, Knowledge, and Experience
Experience:
Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling). Experience working with startups, AI companies, digital-native businesses, or as part of a startup engineering team is strongly valued.
Startup Ecosystem Network:
An established network within incubators, accelerators, venture capital, and the broader startup scene is highly desirable, along with the drive to take on business development activities and open doors to new relationships.
Architectural Mindset:
Ability to white-board, design, and articulate complex enterprise, startup, AI application, agent, network, and security architectures clearly.
Consultative & Advisory Skills:
Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives, founders, and technical leaders.
Commercial Mindset:
Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise, mid-market, or startup sales cycles.
Communication:
Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy. Business fluency in German is required.
Technical Breadth:
We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals:
Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security:
Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance:
Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Engineering:
Solid grounding in AI model fundamentals (model size, context length, reasoning models, fine-tuning versus prompting, and matching the right model to the job). Familiarity with common agent patterns, including knowing when a simple workflow beats an agent, and with open agent frameworks and standards such as MCP. Understanding of how to evaluate and operate AI systems in production.
AI-Augmented Workflows:
Familiarity with prompt engineering, building prototypes with coding agents, AI-assisted scripting and log analysis, and workflow automation to augment everyday CE workflows.
Coding/Scripting:
Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency:
Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Bonus Points
Technical Enablement:
Track record of creating and delivering technical enablement (workshops, code samples, documentation, or developer onboarding) that accelerates customer adoption of complex platforms.
Applied AI Knowledge:
Hands-on experience with retrieval and knowledge systems (RAG, embeddings, reranking, agentic search), domain adaptation through lightweight fine-tuning, sandboxed execution environments for agents that write and run code, LLM orchestration, or model-access controls.
AI Traffic & the Agentic Web:
Understanding of how AI crawlers and agents interact with internet-facing applications: protecting AI endpoints, managing bot and agent access, and exposing services to agents.
Regulatory Knowledge:
Understanding of regulatory requirements such as PCI DSS, HIPAA, SOC 2, GDPR, and the EU AI Act.
Hyperscaler / Digital Native / Startup Background:
Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency, advanced architecture depth, and ability to operate effectively in fast-moving, ambiguous environments.
Compensation
For Germany based hires: Estimated annual salary is between €116,000 - €182,000.
This role is eligible to earn incentive compensation under Cloudflare's Sales Compensation Plan. The estimated annual salary range includes the on-target incentive compensation that may be attained in this role under the Sales Compensation Plan.
Equity: This role is eligible to participate in Cloudflare's equity plan.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Задачи:
— Настройка и поддержка инфраструктуры компании;
— Автоматизация процессов через написание скриптов (Bash, Python);
— Внедрение и обслуживание CI/CD (GitLab, ArgoCD);
— Работа с инструментами контейнеризации (Docker, Kubernetes);
— Настройка систем мониторинга и логирования PHP-приложений (Prometheus);
— Управление конфигурациями (Ansible, Terraform);
— Мониторинг и повышение производительности систем;
— Обеспечение безопасности и надежности инфраструктуры;
— Настройка и обслуживание сетевого оборудования (Cisco, MikroTik);
— Администрирование серверов на Linux Debian и Windows Server AD;
— Управление виртуализацией (KVM, Proxmox).
Условия:
— Возможность делать уникальные продукты, которых нет на рынке;
— Атмосфера неизбежного профессионального роста;
— Работа в молодом и позитивном коллективе;
— Гибридный формат работы в офисе м. Комсомольская/ м. Проспект Мира;
— Пятидневная рабочая неделя;
— Оформление по ТК РФ;
— ДМС.
Задачи:
— Администрирование и развитие инфраструктуры для разработки ПО и его компонентов (C++): build-серверы, test-серверы, CI/CD, Gitflic, CDash;
— Внедрение дополнительных автоматических этапов разработки ПО: статический анализ, динамический анализ, покрытие кода;
— Настройка и поддержка систем виртуализации (Proxmox) и контейнеризации;
— Написание скриптов для автоматизации рутинных задач (Bash, Python);
— Настройка виртуальных машин на базе AstraLinux, Debian;
— Подбор оборудования для обновления инфраструктуры;
— Помощь в сетевом администрировании;
— Администрирование БД PostgreSQL: управление пользователями и базами, настройка подключений и бэкапирования;
— Участие во внедрении ИИ в процессы компании;
— Документирование инфраструктуры.
Требования:
— Профильное образование по направлениям: радиотехника, радиоэлектроника, информатика, информационные технологии и т.п.;
— Опыт работы в аналогичной должности не менее 3 лет;
— Опыт работы с сетевой инфраструктурой;
— Продвинутые навыки администрирования Linux (Debian, AstraLinux); Хорошее знание Bash, Python;
— Знание системы сборки CMake;
— Знание и понимание SQL; Опыт работы в системе контроля версий git.
Условия:
— Работа в крупной, стабильной компании;
— Уровень зарплаты в рынке;
— Возможность профессионального и карьерного развития;
— Полное соблюдение ТК РФ, белая заработная плата (выплата два раза в месяц), стимулирующие премии;
— Возможность профессионального обучения;
— Начало рабочего дня до 10 утра;
— ДМС со стоматологией после испытательного срока;
— Корпоративные мероприятия;
— Спортивные мероприятия (футбол, волейбол, настольный теннис, баскетбол и т.д.);
— Корпоративные скидки (театры, фитнес, детские лагеря и т.д.);
— Метро Динамо и Савелевская - есть корпоративный транспорт. От метро Гражданской 5 минут пешком;
— Работа в офисе первые три месяца работы, потом гибрид 3 дня удаленка и 2 дня в офисе;
— Есть военная бронь;
— Командировки.
Location: GE; PL
Workplace: remote
Overview:
SOFTSWISS is looking for an Incident Response Analyst to join our on-call incident response team. In this role, you will respond to and investigate security incidents across the company, coordinate incident response with relevant teams, and help ensure timely and effective resolution of incidents
.
Key responsibilities:
Participation in security incident response
Performing basic primary incident response measures/triage
Execution (and monitoring of execution) of tasks assigned based on planning results
Development and updating of playbooks for alert verification
Monitoring alerts in compliance with SLA
Submitting proposals for optimizing tools and processes used
The position operates on a 2-on-2-off shift pattern, encompassing a 12-hour day shift, a 12-hour night shift the next day, and 2 free days after that
Required Experience:
Basic indicator of compromise (IoC) analysis skills using publicly available tools (VirusTotal, AnyRun, etc.)
Experience working with Splunk/Clickhouse/SQL at the level of writing simple search queries and interpreting results
Experience working with SOAR/IRP
General understanding of current cyber threats and main attack methods
Basic programming skills in Python, PowerShell, or Bash for automating routine tasks
Knowledge of operating systems (Linux/Windows) at a junior system administrator level
Understanding of the MITRE ATT&CK framework and Cyber Kill Chain
Ability to analyze and process large volumes of data, including logs and triage
Strong communication and teamwork skills: able to clearly articulate thoughts, ask relevant questions, and effectively collaborate with colleagues across different teams, especially during incident response
Analytical and flexible mindset: able to approach issues from different perspectives, build logical chains, make informed decisions, and independently suggest solutions
Proactivity and ownership: takes responsibility for decisions and results, double-checks own work, learns from mistakes and feedback, and actively develops professional skills
Nice to have:
Knowledge of information security best practices (NIST, ISO) and ability to cite them when necessary
Basic knowledge of Docker and Kubernetes, understanding their monitoring features
Experience writing correlation rules in SIEM
Experience with NTA (Network Traffic Analysis) tools
Experience working with online reputation services (VT, AnyRun, IPAbuseDB, etc.)
Experience developing instructions for alert verification and/or writing information security incident response scenarios
Experience with Kafka, ELK, Graylog, etc
Strong Linux system administration experience
Expertise in network, host, and cloud-based analysis and investigation
A strong understanding of attack pipelines (MITRE ATT&CK Framework, Cyber Kill-Chain)
Familiarity with CI/CD, software development lifecycle, and Infrastructure-as-Code (Terraform/Ansible/etc)
Proficiency in automation (Bash/PowerShell, Python)
Experience with log collection, delivery, and normalization
Strong knowledge of open-source solutions for endpoint & infrastructure security, such as Audit.d, Sysmon, AppArmor, SELinux, etc
Fundamental static and dynamic malware analysis skills
Offensive experience (penetration testing, red teaming)
Main Advantages
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Группа компаний «ДОМ.РФ» реализует национальные проекты в области жилищного строительства и ипотеки. Более 25 лет занимается развитием жилищной сферы в России. В компании работает более 9 тысяч человек, из которых более 1,5 тысяч — команда цифровой вертикали. ИТ-команда проводит цифровую трансформацию строительной отрасли и создает инновационные ИТ-продукты для людей, бизнеса и государства.
Описание:
Ищем разработчика-аналитика DWH в направление Рисков. Позиция предполагает примерно 60-70% разработки, остальная часть — аналитика и взаимодействие с заказчиком.
Задачи:
— Проводить проектную коммуникацию с представителями бизнес-заказчика для уточнения бизнес-требований
— Выявлять и анализировать бизнес-требования, потребности и проблемы заказчика
— Формировать спецификации требований, описание логических моделей, структур данных и проектных решений (хранилища и витрины данных)
— Согласовывать проектные решения с архитекторами, разработчиками и аналитиками смежных команд
— Проектировать и разрабатывать ETL/ELT процессы, слои хранилища и витрины данных
— Разрабатывать и оптимизировать SQL-запросы
— Проводить внутреннее тестирование и контроль качества информационных продуктов
— Участвовать в приёмочных испытаниях информационных продуктов и документации с заказчиками
— Обеспечивать контроль качества данных и их целостность
Требования:
— Высшее образование: техническое, математическое или финансовое
— Опыт работы не менее 5 лет
— Уверенные знания Python, GIT, Airflow (DAG с декомпозицией задач, зависимостями, сенсорами)
— Глубокое знание SQL: оконные функции, процедуры, функции, вложенные запросы, опыт оптимизации запросов
— Понимание индексов, партиций, ключей, нормальных форм, SCD
— Понимание моделирования данных, построения хранилища, репликации и консистентности данных
— Умение рефакторить код и проводить миграцию из одной системы в другую
— Знание принципов CI/CD
Будет плюсом:
— Знание PL/SQL для Oracle, Postres, Greenplum или иной MPP СУБД
— Опыт работы с API
— Знание ООП, DBT, Kafka, Bash, SAS, разработка кастомных Airflow операторов
УдалённоmiddleМосква; ОПИСАНИЕ : Мы находимся в поисках разработчика-аналитика DWH в направление Рисков
Задачи:
— Архитектура и развертывание корпоративной инфраструктуры Azure с использованием Terraform/Bicep, поддержка модульных библиотек IaC и управление состоянием.
— Обслуживание, патчинг и оптимизация кластеров Azure Kubernetes Service (AKS), управление автоскейлингом, маршрутизацией ingress и политиками service mesh.
— Проектирование, поддержка и обеспечение безопасности автоматизированных CI/CD пайплайнов в Azure DevOps или GitHub Actions для ускорения циклов деплоя.
— Применение Azure Policy, аудит ролей IAM через Entra ID, управление ротацией секретов в Key Vault, устранение уязвимостей с помощью Defender for Cloud.
— Мониторинг метрик системы, реагирование на инциденты инфраструктуры, проведение RCA и оптимизация использования ресурсов для снижения затрат.
Требования:
— Опыт работы не менее 5 лет с Microsoft Azure, включая compute, сети (VNets, ExpressRoute, Application Gateways) и уровни хранения.
— Продвинутые навыки Terraform или Bicep для автоматизации, обнаружения дрейфа и управления состоянием в мульти-подписочных средах.
— Опыт построения, защиты и масштабирования AKS, управление ingress контроллерами и деплой приложений с Helm.
— Глубокое понимание построения CI/CD с Azure DevOps или GitHub Actions, включая автоматическое сканирование безопасности, соблюдение политик и безотказные релизы.
— Знания в области безопасности облака с Microsoft Entra ID, Azure Key Vault, Azure Policy и RBAC в модели Zero Trust.
— Опыт настройки мониторинга и алертинга с Azure Monitor, Log Analytics, Application Insights или сторонними платформами (Datadog, Dynatrace).
— Локация в часовом поясе CET (+/- 3 часа).
Желательно:
— Сертификаты Azure AZ-104, AZ-305, AZ-400.
— Навыки программирования на Python, Go, PowerShell или Bash для скриптинга инфраструктуры.
— Опыт оптимизации затрат в облаке (FinOps) и управления политиками Azure Cost Management.
— Знакомство с гибридными облачными конфигурациями или Azure Arc.
Условия:
— Своевременная оплата с гибкими вариантами вывода средств.
— Предсказуемый график работы: 8 часов в день.
— До 24 дней гибких выходных в год для полноценных позиций.
— Долгосрочные удалённые позиции в ведущих компаниях.
— Персонально подобранные вакансии без типичных рекрутинговых барьеров.
— Единый процесс контрактации для множества возможностей без дополнительных оценок.
— Стабильная ежемесячная оплата через Proxify.
УдалённоseniorLocated in CET timezone (+/- 3 hours), we are unable to consider applications from candidates in other time zones