Location: Remote - Europe
About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
Nebius is hiring a Forward Deployed Engineer to work alongside Physical AI customers, shape our core infrastructure products, and test ideas for what we should build next.
You will work with enterprises, ISVs, and digital-native companies running training, simulation, synthetic data, evaluation, and model serving workloads. By understanding their systems and helping them reach production, you will uncover requirements that inform our Cloud, Serverless, and Token Factory teams. The goal is to connect needs across Physical AI industries with product decisions, including improvements that benefit enterprise customers more broadly.
You will also investigate opportunities for new Nebius products. You will develop hypotheses about unmet needs, examine demand and existing alternatives, and build prototypes to test with customers. Your findings will help determine which opportunities deserve investment and what an initial product should deliver.
The work is hands-on. You will write code, deploy and benchmark models, build agents, and troubleshoot infrastructure alongside customer engineers.
The position is part of the Physical AI go-to-market team, with close collaboration across customers, NVIDIA, Product, and Engineering.
What you will do
Work with customer engineers to understand their workloads, infrastructure constraints, and production requirements.
Translate Physical AI use cases into requirements that Cloud, Serverless, and Token Factory teams can use, backed by measurements and customer evidence.
Identify enterprise adoption barriers and common needs across industries. Work with Product and Engineering to assess gaps and test improvements with customers.
Build agents that set up, run, and debug Physical AI workloads, connecting them to clusters, schedulers, storage, and model servers.
Deploy and benchmark open-weight models with serving stacks such as vLLM or SGLang, then tune them for customer workloads.
Build prototypes and run technical evaluations to answer specific questions about performance, reliability, and product fit.
Assess demand and existing alternatives for opportunities outside current product teams’ scope, then build where there is a clear market.
Debug across Python, agents, model servers, Kubernetes, GPUs, networking, and storage. Turn successful setups into reusable scripts, deployments, and short guides.
What we are looking for
Three or more years in software engineering, cloud infrastructure, DevOps, ML infrastructure, or similar, including ownership of a production service, cluster, or platform.
Experience working directly with customers or external engineers to scope problems, run evaluations, and explain technical tradeoffs.
Ability to turn an unfamiliar customer problem into concrete infrastructure requirements.
Practical experience building with LLMs or agents, at work or independently, with an understanding of their internals (e.g., transformers, KV caching, or tool calling) and how to evaluate their outputs.
Familiarity with enterprise infrastructure requirements, including identity and access management, network isolation, security, monitoring, and reliability.
Strong Python and Linux skills: you can read unfamiliar code, automate a setup, and debug from logs and metrics.
Practical experience with containers and Kubernetes, including configuration, networking, storage, and scheduling.
A record of getting useful software working with incomplete requirements, measuring results, and following through with the people using it.
Helpful experience
Enterprise customer engineering, solutions architecture, consulting, or taking a new product from an initial customer problem to adoption.
Distributed compute such as Ray, Slurm, Spark, or multi-GPU jobs.
NVIDIA GPU workloads, including memory management, drivers, CUDA, NCCL, and monitoring.
Model serving with vLLM, SGLang, TensorRT-LLM, or TGI.
Robotics, simulation, synthetic data, reinforcement learning, world models, or tools such as Isaac Sim, Isaac Lab, Omniverse, and Cosmos.
Infrastructure automation and enterprise integrations, including Terraform, CI/CD, private connectivity, and identity federation.
Benefits & Perks:
Competitive compensation
Career growth and learning opportunities
Flexibility and ownership
Collaborative and innovative culture
Opportunity to work on impactful AI projects
International environment and talented teams
What's it like to work at Nebius:
Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
Equal Opportunity Statement:
Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
If you need accommodations during the application process, please let us know.
Задачи:
— настройка и поддержка пайплайнов CI/CD, поддержка релизного процесса;
— масштабирование проекта;
— администрирование инфраструктуры в рамках своего проекта;
— мониторинг и логирование своего проекта;
— взаимодействие с коллегами из девопс-команды и инфраструктуры.
Требования:
— писать и поддерживать пайплайны (GitLab CI);
— работать с Kubernetes и Helm;
— администрировать системы на Linux;
— владеть скриптовыми языками Bash, Python, Go;
— владеть контейнерными технологиями Docker;
— работать с Terraform и Ansible;
— работать с Git;
— работать с базами данных SQL;
— иметь опыт настройки и поддержки систем мониторинга, логирования и визуализации;
— базовые знания сетевых технологий.
Два трека на выбор:
— DevOps с фокусом на базы данных (PostgreSQL, Kafka, Redis, Aerospike, Consul)
— DevOps с фокусом на CI/CD и Kubernetes
Что нужно:
— 4+ года в DevOps
— Linux + IaC (Ansible / Terraform)
— GitLab CI: доставка Docker-контейнеров с Python / Go
— Прод-Kubernetes, Helm-чарты
— Мониторинг: Prometheus, VictoriaMetrics, Grafana, ELK, Sentry
— Английский B1+
Условия:
— удалёнка
— гибкий график
— корпоративная школа английского
— компенсация конференций
— дополнительный выходной MyTime
Зарплата в долларах обсуждается индивидуально по итогам собеседования.
УдалённоmiddleГеография найма не уточнена
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Задачи:
— Проектировать платформенные паттерны от начала до конца, создавать эталонные реализации, документировать обоснования и сотрудничать с командами внедрения.
— Участвовать в еженедельных архитектурных обзорах, обеспечивая последовательность и расширяя библиотеку стандартов и архитектурных решений.
— Отвечать за архитектурное руководство в одной из областей: облачная инфраструктура или архитектура данных.
— Определять жизненный цикл технологий, проводить оценку новых технологий через POC, управлять стандартами внедрения и снятия с эксплуатации, оптимизировать затраты совместно с FinOps.
— Поддерживать команды R&D, проводить обзоры дизайна и консультации по сложным инфраструктурным решениям.
— Формировать многолетнюю стратегию платформы, включая опыт разработчиков, конвейеры доставки и инструменты архитектурного обзора с AI.
Требования:
— Широкий опыт архитектуры инфраструктуры, умение защищать архитектурные решения в продуктивных системах.
— Опыт работы с мультиоблачными средами GCP и/или AWS, глубокое понимание Kubernetes (GKE или аналог).
— Владение Infrastructure as Code, включая Terraform и GitOps, опыт проектирования и ревью модулей.
— Глубокие знания в одной или нескольких областях: облачная инфраструктура (сетевые паттерны AWS/GCP, Kubernetes, Istio, безопасность и масштабируемость) и/или архитектура данных (Kafka, Pub/Sub, SQL/NoSQL базы, аналитические колонки, pipeline).
— Способность разрабатывать прототипы, анализировать поведение систем под нагрузкой.
— Лидерские качества, навыки технической коммуникации и внедрения стандартов без формального управления.
— Опыт проведения технологических оценок и POC.
— Знания инфраструктуры для AI/ML нагрузок, включая модели, базы векторов, оценку затрат и задержек.
Преимущества:
— Глубокие знания в обеих областях: облачная и дата инфраструктура.
— Опыт с политиками GCP, организационной структурой и IAM.
— Знания Confluent Platform.
— Опыт участия в архитектурных советах.
— Опыт с AI-усиленными архитектурными инструментами.
— Опыт с MLOps инструментами (MLflow, Kubeflow, Vertex AI Pipelines, SageMaker).
Образование и опыт:
— Степень бакалавра в области компьютерных наук или эквивалентный опыт.
— 10-15+ лет опыта в облачной инфраструктуре, платформенной инженерии, DevOps или архитектуре данных.
УдалённоZoomInfo does not administer lie detector tests to applicants in any location
Задачи:
— Поддержка, развитие и улучшение облачной инфраструктуры в AWS (включая VPC, EC2, EKS, IAM, Route 53, S3);
— Управление платформами на базе Kubernetes;
— Проектирование, внедрение и поддержка Infrastructure as Code с использованием Terraform и Ansible;
— Поддержка деплоя сервисов и стандартизации платформы с помощью Helm;
— Построение, поддержка и развитие CI/CD‑пайплайнов с использованием GitLab CI и Argo CD, администрирование on‑premises GitLab;
— Поддержка и развитие мониторинга и observability (VictoriaMetrics, VictoriaLogs, Grafana);
— Администрирование и поддержка HashiCorp Vault;
— Диагностика и поддержка Linux‑окружений, работающих на EC2 и в Kubernetes;
— Базовая операционная поддержка PostgreSQL, MS SQL, Apache Airflow, а также БД, работающих в AWS RDS и Kubernetes;
— Участие во внедрении мер безопасности инфраструктуры и платформ (шифрование, сегментация сети, безопасное взаимодействие сервисов и т. д.);
— Разработка внутренних инструментов и решений для автоматизации;
— Разбор инцидентов, выявление первопричин и внедрение превентивных улучшений.
Требования:
— Высшее образование;
— Сильный практический опыт работы с AWS, особенно VPC, EC2, EKS, IAM, Route 53, а также понимание сетевых концепций;
— Уверенный опыт использования Terraform в продакшене;
— Глубокий практический опыт работы с Kubernetes;
— Хорошие знания Helm и опыт поддержки переиспользуемых шаблонов и chart’ов;
— Практический опыт с Helm Library Charts и Go‑templating;
— Уверенные навыки администрирования Linux;
— Хорошее понимание сетевых основ: TCP/IP, DNS, HTTP(S), TLS, VPN, балансировка нагрузки, ingress;
— Опыт построения и поддержки CI/CD‑пайплайнов, предпочтительно с GitLab CI;
— Опыт работы с GitOps‑инструментами, такими как Argo CD;
— Понимание мониторинга, логирования и устранения проблем в распределённых системах;
— Умение писать скрипты и инструменты автоматизации на Bash, Python или Go;
— Понимание основ безопасности инфраструктуры: работа с секретами, шифрование, контроль сетевого доступа, принцип наименьших привилегий, безопасные соединения;
— Английский язык на уровне минимум B1, предстоит общение с иностранцами.
Условия:
— Прозрачную систему мотивации (оклад + ежегодные бонусы до 3ех окладов);
— Подключение на крупный и стабильный проект. Разнообразие интересных задач;
— Отсутствие бюрократии, высокая степень свободы. Решения принимаются очень быстро;
— Карьерный рост, прямое влияние на бизнес и возможность использовать новейшие технологии.
О компании:
Акционерное общество «Новый Старт» - частная российская аэрокосмическая компания замкнутого цикла, разработчик отечественных космических систем дистанционного зондирования Земли с космическими аппаратами радиолокационного и оптического наблюдения, оператор космических запусков с использованием ракеты-носителя сверхлегкого класса.
О команде:
Команда отвечает за полный цикл создания инфраструктуры на базе ЦОД: от выбора и размещения оборудования до запуска собственной частной облачной платформы. Проектируют сетевую архитектуру, конфигурацию серверов и систем хранения, выбирают стек системного ПО (виртуализация, Kubernetes, хранилища, решения для наблюдаемости и управления инфраструктурой) и запускают платформенные и продуктовые сервисы. Вместе с продуктовыми командами занимаются контейнеризацией приложений, проектируют процессы CI/CD и внедряют GitOps-подход для управления развёртыванием сервисов в различные окружения. Используют подход Infrastructure as Code (IaC), развивают автоматизацию и наблюдаемость для предсказуемых и воспроизводимых изменений инфраструктуры и сервисов.
Задачи:
— Контейнеризация приложений.
— Проектирование и развитие процессов непрерывной интеграции и доставки (CI/CD).
— Автоматизация развертывания приложений и инфраструктуры с использованием подходов IaC.
— Внедрение и развитие GitOps-подхода для управления конфигурациями и релизами.
— Управление контейнерной средой.
— Настройка и развитие систем мониторинга, логирования и оповещения о сбоях и инцидентах для сервисов и инфраструктуры.
— Обеспечение отказоустойчивости и масштабируемости сервисов.
— Взаимодействие с командами разработки и эксплуатации для оптимизации развертывания и эксплуатационных процессов.
Требования:
— Опыт работы в роли DevOps-инженера от 2 лет.
— Отличные знания Linux.
— Практический опыт контейнеризации: Docker/OCI, написание и оптимизация Dockerfile, использование Docker Compose.
— Опыт разработки CI/CD-пайплайнов в GitLab CI или аналогичных системах (Jenkins, GitHub Actions и др.).
— Опыт автоматизации и подхода IaC: Ansible, Terraform или аналогичные инструменты.
— Практический опыт работы с Kubernetes: развертывание приложений с использованием Helm или Kustomize, управление манифестами и ресурсами (Deployments, StatefulSets, Services, Ingress, ConfigMap/Secret и т.д.), базовая диагностика проблем в кластере.
— Понимание и практический опыт построения GitOps-процессов (Argo CD или Flux CD).
— Навыки написания скриптов на Bash и Python для задач автоматизации.
— Навыки работы с системами мониторинга и логирования (Prometheus, Grafana, ELK/Loki).
— Понимание принципов отказоустойчивости и масштабируемости сервисов (репликация, шардирование, горизонтальное/вертикальное масштабирование).
— Будет плюсом опыт развёртывания и настройки брокеров сообщений (Kafka, RabbitMQ), систем кэширования (Redis), баз данных (PostgreSQL, MongoDB), а также распределённых хранилищ и объектных систем (Ceph, Longhorn, MinIO).
Условия:
— Оформление по ТК РФ.
— График работы: 5/2, с 9.00 до 18.00. Работа на территории Компании.
— Предоставление ДМС.
— Офис в шаговой доступности от метро Динамо, Савеловская.
Задачи:
— Стандартизация эксплуатационных и DevOps-практик, включая разработку типовых шаблонов CI/CD, Helm-чартов, конфигураций мониторинга, логирования и правил эксплуатации;
— Развитие систем мониторинга и наблюдаемости (observability);
— Обеспечение отказоустойчивости и высокой доступности информационных систем, включая анализ единых точек отказа, настройку механизмов резервирования и разработку технических решений по повышению надёжности;
— Анализ и устранение инцидентов и технологических проблем, включая диагностику инфраструктурных и прикладных проблем, поиск первопричин (RCA), разработку и реализацию корректирующих мероприятий;
— Настройка, сопровождение и регулярная проверка процессов резервного копирования и восстановления, включая контроль возможности фактического восстановления информационных систем и данных;
— Автоматизация рутинных операций;
— Отладка и интеграция новых функциональностей информационной системы;
— Сопровождение контейнерной инфраструктуры и оркестрации приложений, включая Kubernetes или отечественные аналоги (Deckhouse и Базис), Helm, Docker, управление конфигурациями, ресурсами и жизненным циклом приложений;
— Техническая поддержка и интеграция новых функциональностей информационных систем, включая подготовку инфраструктуры, настройку окружений, участие в тестировании и вводе изменений в промышленную эксплуатацию;
— Участие в проектировании архитектуры информационных систем с точки зрения эксплуатации, надёжности, масштабируемости, наблюдаемости и возможности автоматизированного сопровождения.
Требования:
— Опыт настройки и администрирования ОС Linux не менее 3 лет;
— Уверенные навыки администрирования кластерных структур на платформе Linux;
— Опыт в работе со средствами виртуализации;
— Опыт использования систем управления конфигурациями (Chef, Puppet, Ansible);
— Опыт работы и администрирования Apache/Nginx, Docker, Kubernetes, Varnish, PostgreSQL, ELK Stack / OpenSearch dashboards, Prometheus, Grafana;
— Знание и использование в работе скриптовых языков (bash, sh);
— Опыт в работе языка Python;
— Опыт работы с системами контроля версий (svn/git);
— Умение настраивать CI/CD pipeline'ы;
— Администрирование и настройка с инструментами CI/CD: Jenkins, Harbor, Terraform, ArgoCD, Keycloak или аналогами;
— Опыт администрирования Kafka;
— Опыт администрирования СУБД Postgres;
— Опыт работы с облачными платформами (AWS, Google Cloud, Azure, YandexCloud, SberCloud);
— Понимание концепций и технологий, используемых в непрерывном развертывании ПО, автоматизации процессов сборки, тестирования и внедрения новых версий программ;
— Понимание принципов и технологий, используемых для создания современных web сервисов;
— Отличные коммуникативные навыки и умение работать в команде;
— Желание учиться и развиваться.
Условия:
— Гибридный или полностью удалённый формат работы. Для тех, кто предпочитает офис — в Москве: современное пространство в 5 минутах от м. Новокузнецкая (фитнес-зал, настольный теннис, комната PS 5, регулярные активности для резидентов), в Санкт-Петербурге: коворкинг в 10 минутах от м. Маяковская (PS 5, еженедельные вечеринки);
— Работа в аккредитованной ИТ-компании со всеми предусмотренными государственными льготами, включая ИТ-ипотеку;
— Полностью «белая» заработная плата. Уровень дохода обсуждается индивидуально и зависит от опыта и экспертизы;
— ИТ-отсрочка и бронь от мобилизации как для сотрудников компании с критически важной инфраструктурой;
— Корпоративные льготы на авиабилеты авиакомпаний «Аэрофлот», «Россия» и «Победа» для сотрудника и членов семьи (родители, супруг(а), дети);
— ДМС с первого рабочего дня: стоматология, помощь на дому, плановый и экстренный стационар; возможность подключения семьи на льготных условиях;
— Компенсация питания при работе из офиса;
— Курсы, сертификации, профессиональные конференции;
— Корпоративный сервис благополучия: безлимитные консультации с экспертами по юридическим, психологическим, финансовым вопросам и вопросам здорового образа жизни;
— Корпоративные мероприятия и активности: спорт, киберспорт, мотопробеги и другие форматы внерабочего общения;
— Дополнительно: кафетерий скидок, доступ к корпоративной библиотеке Alpina Digital, билеты на футбольные и баскетбольные матчи.
Location: Chicago
DRW
is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.
Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.
We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it.
DRW
is a place of high expectations, integrity, innovation and a willingness to challenge consensus.
Our philosophy:
We believe in relentless automation of repetitive tasks.
We have the curiosity and drive to dig deep and find creative solutions.
We believe our goal is to find the right solution rather than always being right.
We provide exceptional customer service to our teams and trading desks.
We care more that the right thing is done than about rigid job descriptions or boundaries.
What you’ll do:
Administer core Microsoft services: Active Directory, DNS, DHCP, Group Policy, Exchange (on-premise, Online, hybrid).
Deploy, maintain and support Windows Server environments (2016–2025).
Support Microsoft cloud services (Entra ID, OneDrive, Copilot, Microsoft 365 services).
Configure single sign on and federation (SAML, OAuth/OIDC, SCIM).
Triage and resolve tickets from the operations queue; respond to critical production incidents.
Implement planned and ad hoc changes in accordance with firmwide change management processes.
Maintain clear system documentation and capture specialized configurations as repeatable runbooks.
Participate in a global support team with on call rotation and occasional weekend maintenance.
Your background:
5+ years managing Windows Server infrastructure in high visibility, mission critical environments.
Deep expertise in Windows Server services: Active Directory, Group Policy, DNS, DHCP, Failover Clustering, load balancers.
Hands on experience with Entra ID, Exchange (Server/Online/Hybrid), MECM (SCCM).
Proficient with scripting (PowerShell, Python), IAC (e.g. Terraform, Ansible) and version control (GitHub, GitLab, Bitbucket).
Strong networking knowledge and experience with server hardware and hypervisor/VM deployments.
Excellent documentation and knowledge management skills; ability to turn ad hoc tasks into documented, repeatable processes.
Proven ability to troubleshoot and resolve critical issues under pressure (trading/low latency environments a plus).
Strong written and verbal communication skills. You can work across teams and have evidence-based discussions on technical and operational topics
You are eager to learn, collaborate, and find solutions under interesting constraints
Bonus points if you have:
Experience with Splunk, Grafana, Alertmanager, Prometheus
Familiarity with containerization and Kubernetes.
Prior experience in the trading or financial services industry.
The annual base salary range for this position is $155,000 to $185,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.
For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at
https://drw.com/privacy-notice
.
California residents, please review the California Privacy Notice for information about certain legal rights at
https://drw.com/california-privacy-notice
.
[#LI-SK1]
Location: Remote
Workplace: Remote
Phantom https://phantom.com is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets that never close, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. Phantom users are able to discover the markets that matter and the cultural moments that shape them, building conviction through real-time data and the verified performance of top traders. With self-custody and access to open networks at its core, Phantom lets them control their financial moves in the same app they use to safely store or spend money worldwide.
Phantom has reached #1 in Google Play's finance category and consistently ranks in the top 50 apps across all categories. Check out our Forbes Fintech 50 https://www.forbes.com/sites/ninabambysheva/2026/02/23/inside-phantoms-battle-plan-to-win-the-crypto-fueled-superapp-war/ and CNBC and Statista's World's Top Fintech Companies 2026 https://www.cnbc.com/worlds-top-fintech-companies-2026/!
We are around 180 people, fully remote, backed by a $150M Series C investment from a16z, Sequoia Capital and Paradigm.
Platform security is foundational to protecting Phantom and the systems our users rely on. We’re hiring a Senior Platform Security Engineer to own and improve security across our AWS and Kubernetes environments. You’ll work directly with infrastructure and engineering teams to secure the control planes, identities, workloads, and deployment systems behind our most critical products.
We’re building an AI-native security team that aggressively uses AI to expand the speed, depth, and reach of our work. We’re looking for a strong security engineer with high agency who can identify the risks that matter, build practical controls, and own problems through verified remediation. This is a hands-on role for someone who is comfortable working in production systems, writing code and infrastructure, responding to incidents, and making security improvements without slowing down the teams building on the platform.
This role is fully remote; however, we’re only open to candidates based in the US and Canada.
RESPONSIBILITIES
- AWS Security: Own and improve security across Phantom’s multi-account AWS environment, including IAM, Identity Center, networking, compute, storage, secrets, logging, and organization-level guardrails.
- Kubernetes Security: Secure production Kubernetes environments running on Amazon EKS, including cluster configuration, workload identity, RBAC, admission controls, network boundaries, secrets, container security, and tenant isolation.
- Identity and Access: Design least-privilege access models for engineers, services, and automation. Build scoped, auditable, and time-bound access paths for sensitive production systems.
- Mission-Critical Systems: Protect the infrastructure supporting products and services that handle sensitive data and high-value operations.
- Cloud Security Architecture: Lead security design for new infrastructure, platform services, and major architectural changes.
- Infrastructure and Policy as Code: Build reusable security controls using tools such as Pulumi, Terraform, Kubernetes policy engines, and automated configuration validation.
- CI/CD and Supply Chain Security: Harden build, deployment, and release systems, including GitHub Actions, workload federation, build runners, dependencies, artifacts, signing, provenance, and access to production environments.
- Security Automation: Build tools that identify and remediate cloud and Kubernetes risks at scale. Apply AI-assisted workflows where they materially improve analysis, coverage, or response speed.
- Cross-Functional Leadership: Partner closely with Infrastructure, SRE, Developer Experience, and product engineering teams. Establish practical platform-security standards and help teams adopt them.
QUALIFICATIONS
- 7+ years of experience in platform security, cloud security, infrastructure security, security engineering, or a closely related engineering role.
- Deep, hands-on experience securing production AWS environments. You understand IAM and resource policies, workload identity, network security, secrets management, logging, organization-level controls, and the ways these systems fail in practice.
- Deep experience securing Kubernetes in production, preferably Amazon EKS, including RBAC, workload identity, admission policy, network policy, pod security, secrets, and cluster hardening.
- Experience designing or securing mission-critical systems where compromise, excessive privilege, or loss of availability could have significant customer or business impact.
- Strong understanding of identity, authorization, least privilege, isolation, and blast-radius reduction across both human and machine access.
- Experience securing CI/CD and software supply chains, including GitHub Actions or similar systems, build runners, workload federation, artifacts, and production deployment paths.
- Experience writing and reviewing infrastructure as code using Pulumi, Terraform, CloudFormation, or similar tools.
- Ability to write production-quality code or automation in a language such as TypeScript, Python, Go, or Rust.
- High agency and ownership. You can take an ambiguous platform-security problem from initial investigation through implementation and verified remediation.
- Clear communication and a strong track record of partnering with infrastructure and engineering teams while maintaining a high security bar.
NICE TO HAVES
- Experience with AWS Nitro Enclaves or other trusted execution environments, including attestation, isolation boundaries, secure key handling, and operational lifecycle management.
- Experience securing financial, payments, wallet, custody, or other high-value transaction systems.
- Familiarity with key-management infrastructure, AWS KMS, CloudHSM, cryptographic signing systems, or secrets-management platforms.
- Experience operating or securing multi-region Kubernetes and AWS environments at significant scale.
- Familiarity with service meshes and cloud-native networking technologies such as Istio, PrivateLink, Transit Gateway, or eBPF-based controls.
- Experience with GitHub OIDC, Argo CD, Helm, Crossplane, or Kubernetes-based infrastructure delivery.
- Experience using cloud-security and observability platforms such as Wiz, Datadog, GuardDuty, Security Hub, or CloudTrail.
- Experience building policy-as-code, automated remediation, or security tooling used by a large engineering organization.
- Familiarity with blockchain infrastructure or self-custodial wallet architecture.
The target base salary for this role will range between $200,000 to $250,000 with the addition of equity and benefits. This is determined by a few factors including your skillset, prior relevant experience, quality of interviews and market factors (such as location) at the point in time of offer.
Why Work With Us
Phantom's journey to becoming a global trading app began with making crypto easier to use. Today, we’re building on that foundation to help people discover the markets that matter, make informed financial moves, and safely store or spend their money worldwide. Joining Phantom means helping shape that next chapter: building products that bring the freedom of open markets to more people.
- Build for global impact: Create products used by tens of millions of people, making innovative financial markets more accessible to users around the world.
- Make complexity feel simple: Solve meaningful challenges across design, engineering, and user experience to make discovering markets and managing money seamless.
- Put users in control: Help build a future where people have greater freedom over their assets and financial decisions, with security and self-custody at the foundation.
Benefits (only available to full-time employees)
- Competitive salary and equity
- Comprehensive insurance (medical/dental/vision): base plan 100% covered
- Flexible hours and a long-standing, supportive remote environment
- Unlimited vacation: Take time when you need it (and we really mean it!)
- 401(k) retirement plan
- Wellness stipend
- Weekly meal stipend
- Learning & Development stipend
- Remote / WFH set-up stipend
We strongly encourage candidates of all backgrounds to apply. We believe that our work is stronger with a variety of perspectives, and we’re eager to further diversify our company. If you have a background that you feel would make an impact at Phantom, please consider applying. We’re committed to building an inclusive, supportive place for you to do the best work of your career.
By submitting your resume and application materials, you acknowledge and agree that Phantom Technologies, Inc. ("Phantom") collects and processes your personal information (including application materials, interview records, and related data) to evaluate your candidacy. Phantom may use AI-powered tools and third-party service providers for transcription, note-taking, scheduling, and other administrative tasks. Phantom does not sell your information and your materials will be handled securely and in accordance with applicable data protection laws.
Location: Remote, Global
Workplace: Remote
About Supabase
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
About the Role
We're looking for a FinOps Engineer to help drive cost optimization and cloud financial governance across our AWS infrastructure and GCP footprint. You'll work cross-functionally with Engineering, Finance, and Product to find and ship savings, build the tooling necessary to maximize efficiency of every dollar spent in the cloud, and cultivate a culture of cost awareness across engineering teams.
This is a hands-on engineering role, not an analyst seat. You'll do the schlep work other teams don't have time for, digging into a bucket's access pattern, writing the Terraform or Lambda that ships the fix, working on a product feature chasing a number until it reconciles, and influencing product decisions when cost to reliability tradeoffs hit. Strong communication matters as much as technical depth, you'll regularly explain a savings case to an engineering team, a finance stakeholder, and a leadership audience in the same week.
What You'll Be Responsible For
In this role, you'll:
- Find and ship savings across AWS and GCP: Analyze billing, usage, and cost trends to identify opportunities, rightsizing, storage lifecycle policies, data transfer, and spot/auto-scaling. Take ideas from identification through to a realized dollar figure, not just a recommendation.
- Build and maintain cost attribution: Tagging policies, cost allocation, and chargeback/showback so engineering teams can see and own their own spend. This is foundational work other savings work depends on.
- Automate cost governance: Build automated cost reporting, anomaly detection, and alerting. Write the scripts and infrastructure-as-code (Python, Terraform, Lambda) that enforce cost policy rather than relying on manual review.
- Partner with engineering on architecture decisions: Bring cost into the room early, cost-efficiencies are cheaper to get right at design than to retrofit.
- Work with Finance on forecasting and reporting: Support budget tracking and financial KPIs; build dashboards engineering and finance can both read.
You Might Be a Good Fit If You
- Have strong AWS expertise and working GCP knowledge, including pricing models, billing structures, and cost optimization mechanics.
- Have automation and scripting skills: Python, Terraform/ pulumi, Lambda, or Bash
- Are comfortable with cost/billing tooling: AWS Cost Explorer, Cost & Usage Reports, GCP Billing Reports, and BI/dashboarding (we use Hex).
- Have experience with, or are comfortable picking up, Linear and Notion as the system of record for tracking and documenting FinOps work.
- Experience with a dedicated cloud cost management platform (e.g. CloudZero, Vantage, or similar) is a plus, not required.
- Can analyze cost data and present it clearly to both technical and non-technical audiences.
- Have prior experience in a FinOps, cloud cost management, or cloud governance role.
- Are energized by doing the unglamorous, high-leverage work (the schlep) that unblocks other teams, and by working cross-functionally without positional authority.
WHAT WE OFFER
- Fully Remote
We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.
- ESOP
Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.
- Tech Allowance
Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits
Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.
- Annual Off-Sites
Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.
- Flexible Work
We operate asynchronously and trust you to manage your own time. You know what needs to be done and when.
- Professional Development
Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
ABOUT THE TEAM
Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members
We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.
Задачи:
— Администрировать продуктивные и тестовые кластеры ClickHouse, контролировать состояние шардов, реплик, Distributed-таблиц и ReplicatedMergeTree-таблиц;
— Диагностировать replication queue, merges, mutations, inserts, деградацию запросов и проблемы с дисковой подсистемой;
— Анализировать системные таблицы ClickHouse и состояние кластера;
— Участвовать в изменении топологии кластера: добавление шардов, реплик, серверов, изменение Distributed-таблиц;
— Планировать горизонтальное масштабирование ClickHouse-кластера;
— Оптимизировать схемы данных, партиционирование, ключи сортировки, TTL, индексы, storage policy и настройки сервера;
— Работать с хранением данных: локальные диски, LUN, DAS, hot / warm storage, S3-совместимое хранилище;
— Прорабатывать дедупликацию данных, повышение уровня сжатия и механизм токенизации / full text search по событиям;
— Настраивать и сопровождать ClickHouse Keeper / ZooKeeper;
— Настраивать TLS/SSL для клиентских подключений и межсерверного взаимодействия;
— Разрабатывать и проверять backup/restore и disaster recovery;
— Настраивать мониторинг, алерты и дашборды по ClickHouse;
— Готовить Ansible playbooks / roles, runbook’и, инструкции, чек-листы и технические отчёты.
— Администрировать продуктивные и тестовые инсталляции MariaDB;
— Контролировать состояние серверов, репликации, соединений, транзакций, блокировок и фоновых процессов;
— Настраивать и сопровождать репликацию: master-slave, master-master, GTID-based replication;
— Диагностировать replication lag, ошибки SQL thread / IO thread, рассинхронизацию данных и конфликты при master-master-схемах;
— Участвовать в миграции MariaDB с master-master-репликации на Galera Cluster;
— Настраивать, сопровождать и диагностировать Galera Cluster;
— Прорабатывать HA-архитектуру MariaDB: failover, fencing, VIP / proxy layer, split-brain-риски;
— Разрабатывать и проверять disaster recovery-сценарии, RPO / RTO и восстановимость резервных копий;
— Анализировать производительность: slow queries, EXPLAIN, индексы, locks, deadlocks, buffer pool, connection pool, disk IO;
— Оптимизировать конфигурацию MariaDB с учётом нагрузки, объёма данных, RAM, CPU, дисковой подсистемы и сети;
— Настраивать TLS/SSL для клиентских подключений и репликации;
— Настраивать мониторинг, алерты, дашборды и runbook’и по MariaDB.
— Участвовать в расследовании production-инцидентов, связанных с ClickHouse, MariaDB, Linux, сетью или дисковой подсистемой;
— Анализировать метрики, логи, системные таблицы, состояние репликации, блокировки, диски, сеть и конфигурации;
— Формулировать технические гипотезы, проверять их и отделять первопричину от сопутствующих факторов;
— Готовить технические выводы по итогам инцидентов и участвовать в postmortem-разборах;
— Разворачивать тестовые стенды ClickHouse и MariaDB для проверки архитектурных решений;
— Проверять обновления, изменение топологии, расширение хранилища, storage policy и параметры ClickHouse / MariaDB до применения в production;
— Автоматизировать типовые операции через Ansible / Bash / Python / Terraform или аналогичные инструменты;
— Взаимодействовать с заказчиками, объяснять технические риски понятным языком, предлагать решения и лидировать технические обсуждения.
Требования:
— Практический опыт промышленной эксплуатации ClickHouse;
— Понимание архитектуры ClickHouse: shards, replicas, Distributed tables, ReplicatedMergeTree, MergeTree family;
— Опыт диагностики replication queue, merges, mutations, insert/select latency, деградации запросов и проблем с дисковой подсистемой;
— Понимание партиционирования, ключей сортировки, TTL, storage policies, disks, volumes, data skipping indexes;
— Опыт изменения топологии ClickHouse-кластера или глубокое понимание порядка и рисков таких изменений;
— Опыт настройки TLS/SSL для ClickHouse;
— Опыт эксплуатации MariaDB в продуктивной или близкой к продуктивной среде;
— Понимание MariaDB, InnoDB, транзакций, индексов, блокировок, deadlocks, isolation levels;
— Опыт настройки и диагностики репликации MariaDB;
— Понимание GTID, binary logs, relay logs, replication lag, failover и рисков master-master-репликации;
— Опыт настройки backup/restore MariaDB и проверки восстановимости резервных копий;
— Опыт диагностики производительности MariaDB: slow query log, EXPLAIN, индексы, locks, buffer pool, disk IO;
— Опыт эксплуатации Linux-серверов;
— Понимание влияния CPU, RAM, disk IO, network и filesystem на работу ClickHouse и MariaDB;
— Опыт настройки мониторинга и алертов для ClickHouse, MariaDB и инфраструктуры;
— Опыт работы с Prometheus, Grafana, Zabbix или аналогичными системами мониторинга;
— Опыт автоматизации через Ansible, Bash, Python или аналогичные инструменты;
— Умение аккуратно проводить изменения в production: план работ, оценка рисков, rollback-план, проверка результата;
— Умение писать техническую документацию: инструкции, runbook’и, чек-листы, postmortem-отчёты.
Желательные требования:
— Опыт или уверенное понимание Galera Cluster;
— Опыт эксплуатации ClickHouse и MariaDB в составе SIEM, SOC, log management, observability, telemetry или других высоконагруженных систем;
— Опыт работы с большими объёмами данных: десятки или сотни ТБ;
— Опыт работы с ClickHouse Keeper или ZooKeeper;
— Опыт эксплуатации ClickHouse / MariaDB на bare metal;
— Опыт работы с LUN, DAS, локальными дисковыми массивами и S3-совместимыми объектными хранилищами;
— Опыт нагрузочного тестирования ClickHouse и MariaDB;
— Опыт построения процедур disaster recovery;
— Опыт подготовки архитектурных и эксплуатационных документов для заказчиков;
— Опыт работы с ProxySQL, MaxScale, HAProxy, Keepalived, Pacemaker / Corosync или аналогичными решениями;
— Опыт проведения регламентных работ с минимальным downtime;
— Опыт аудита продуктивных инсталляций у заказчиков.
Условия:
— Постоянная занятость;
— Работа с продуктивной, тестовой и лабораторной инфраструктурой;
— Взаимодействие с командой эксплуатации, инженерами SIEM, разработчиками, архитекторами и техническими представителями заказчика;
— Участие в планировании изменений, разборе инцидентов и развитии архитектуры хранения данных.
Задачи:
— Разработка и поддержка инфраструктуры проектов в Timeweb Cloud.
— Развитие Infrastructure as Code с использованием OpenTofu / Terraform.
— Разработка и поддержка Ansible-ролей и playbook'ов.
— Настройка и поддержка Docker / Docker Compose окружений.
— Разработка и поддержка GitLab CI/CD пайплайнов для инфраструктуры и приложений.
— Настройка сетевой инфраструктуры: VPC, NAT, firewall, reverse proxy, DNS, SSL/TLS.
— Поддержка stage и production окружений.
— Настройка и развитие мониторинга, логирования и алертинга на базе Prometheus, Grafana и Loki.
— Участие в расследовании инфраструктурных проблем и инцидентов.
— Автоматизация инфраструктурных и эксплуатационных задач.
Требования:
— Уверенное знание Linux.
— Опыт работы с Docker и Docker Compose.
— Опыт работы с Terraform / OpenTofu или другими IaC-инструментами.
— Опыт работы с Ansible.
— Опыт построения и поддержки CI/CD пайплайнов.
— Понимание сетей: TCP/IP, DNS, HTTP/HTTPS, NAT, firewall.
— Опыт работы с nginx, Angie, Traefik или другими reverse proxy.
— Понимание принципов работы PostgreSQL, Redis и других типичных сервисов веб-приложений на инфраструктурном уровне.
— Опыт работы с Git.
Будет плюсом:
— Опыт работы с Timeweb Cloud или другими облачными провайдерами.
— Опыт работы с GitLab CI/CD и self-hosted GitLab.
— Опыт работы с Prometheus, Grafana, Loki, Grafana Alloy.
— Опыт работы с Nexus или другими registry/repository manager'ами.
— Опыт построения инфраструктуры для PHP, Node.js или Go-приложений.
— Опыт работы с RabbitMQ, Centrifugo и другими инфраструктурными компонентами веб-приложений.
— Опыт настройки security-проверок инфраструктурного кода: Checkov, Gitleaks, Trivy и аналоги.
— Опыт работы с Kubernetes.
Требуется DevOps инженер с опытом 3-5 лет для работы в офисе в Тбилиси над мобильным приложением.
Требования:
— Опыт 3-5 лет
— Kubernetes (k8s)
— AWS
— Argo CD
— Terraform
— Grafana
— Уверенное владение нейросетями
— Опыт работы с AI-агентами
Условия:
— Полная занятость
— Фиксированная зарплата на руки от 2500 до 3000
Location: PL
Workplace: remote
Overview:
SOFTSWISS is hiring a Senior SOC Detection Engineer to join our Security Operations team. We are seeking a hands-on security professional to help build and develop our detection engineering function, strengthening the company’s ability to identify, investigate, and respond to security threats across Windows, Linux, and Kubernetes environments.
Purpose of the role:
You will be responsible for owning the full lifecycle of security detections, from researching attack techniques and defining logging requirements to developing, testing, deploying, and continuously improving detection content in Splunk. Your work will help enhance detection coverage, improve telemetry quality, reduce false positives, and ensure that security teams can reliably identify and respond to real threats.
Key responsibilities:
Develop, test, deploy, and maintain detection and correlation rules in Splunk or a similar SIEM.
Translate incident investigations, threat hunting, and attack research into effective detections.
Analyze false positives, false negatives, and detection gaps.
Improve detection coverage and map detections to MITRE ATT&CK techniques.
Develop and optimize SPL queries, dashboards, reports, and risk-based detections.
Define requirements for logging, parsing, normalization, enrichment, and data quality.
Develop monitoring and health checks for detection rules and data sources.
Contribute to automated detection testing, synthetic events, telemetry replay, and CI/CD workflows.
Participate in incident investigations, threat hunting, purple team exercises, and attack emulation.
Collaborate with SOC, Incident Response, Threat Intelligence, Infrastructure, and Engineering teams.
Document detection logic, data sources, dependencies, limitations, and expected behavior.
Required Experience:
Strong hands-on experience in SOC, Detection Engineering, Threat Hunting, Incident Response, or a related field.
Deep understanding of MITRE ATT&CK, common attack techniques, and detection methodologies.
Strong proficiency in Splunk SPL or another enterprise SIEM platform.
Experience developing complex queries, correlations, dashboards, and reports.
Practical experience tuning detections and managing exceptions and allowlists.
Ability to define and evaluate logging and telemetry requirements.
Proficiency in Python, PowerShell, or Bash for automation.
Experience with Git, code reviews, APIs, and basic CI/CD practices.
Understanding of Windows and Linux security monitoring.
Ability to independently investigate complex problems and drive solutions to completion.
Strong communication skills and the ability to work effectively across teams.
Nice to have:
Experience with Splunk Enterprise Security, CIM, data models, macros, and lookups.
Experience with Sysmon, Windows security auditing, Active Directory, auditd, osquery, Tetragon, Docker, or Kubernetes.
Experience with YARA, CALDERA, Shuffle, or other security automation and attack emulation tools.
Experience building detection quality metrics and automated validation frameworks.
Experience with Terraform, Ansible, or other infrastructure-as-code tools.
Participation in security research, conferences, or the broader security community.
Our technology focus:
Splunk Enterprise Security, MITRE ATT&CK, Windows and Linux telemetry, Kubernetes and container logs, Python, PowerShell, Bash, Git, and CI/CD.
Learn more about our hiring process
here (
link
)
– what to expect, how to prepare, and what makes SOFTSWISS different.
Main Advantages
Private health insurance
Sports benefits
Comprehensive Mental Health Program
Free English lessons (online)
Local language courses
Paid time off
Maternity leave support
Referral program rewards
Upskilling, internal workshops, and participation in professional conferences and corporate events
Задачи:
— Разработка масштабируемой цифровой медиаплатформы, предоставляющей разнообразный контент для глобальной аудитории.
— Участие в инициативе по редизайну фронтенда.
Требования:
— Опыт профессиональной разработки ПО не менее 4.5 лет с сильным недавним опытом в Go и Angular/TypeScript.
— Сильные навыки full-stack разработки, способность работать как с бэкендом, так и с фронтендом.
— Опыт работы с Angular, TypeScript, HTML, CSS, RxJS, NgRx.
— Практический опыт работы с Google Cloud Platform (GCP).
— Понимание DevOps.
— Опыт работы с MongoDB, PostgreSQL, SQL, Redis.
— Практический опыт с Docker, Terraform, Ansible.
— Опыт работы с WebSockets и технологиями обмена сообщениями, такими как Kafka или RabbitMQ.
— Уровень английского языка от Upper-Intermediate и выше.
Условия:
— Работа только из стран ЕС.
— Временная зона CET.
— Требуется знание английского языка от B2.
Location: Baku, Azerbaijan
DevOps Engineer
Location
: Baku, Azerbaijan
Type
: Full-time
Company
: DRL LLC
About eiGroup
At eiGroup, we believe ideas can change industries - but only if they are nurtured with structure, science, and courage.
We’re an
R&D and Innovation Venture Studio
that transforms human ingenuity into technological value that scales.
Our ecosystem brings together researchers, engineers, and creators who turn complex challenges into scalable products - from subsurface imaging to AI-driven analytics, from remote sensing to digital transformation.
Our ventures are built in-house, born from research, and grown into independent companies.
Together, we’re shaping how innovation takes root in this region - and how it reaches the world.
What You'll Do
Own CI/CD across Azure Pipelines and GitLab CI: YAML pipelines, multi-stage builds, environment promotion, approvals, artifact and container publishing, shared templates so each team isn't reinventing its own build
Provision and run our Kubernetes clusters, including standing up new ones from scratch with Rancher: workloads, ingress, secrets, resource limits, autoscaling, rollout and rollback strategy, Helm charts, version upgrades and etcd backups
Own our Azure estate — App Services, compute, networking, storage, Key Vault, managed identities — alongside self-hosted services running on our own infrastructure, including cost hygiene and right-sizing
Introduce Infrastructure as Code (Terraform or Bicep) from a largely manual starting point: reusable modules, state management, real parity between environments
Build and maintain monitoring and alerting: metrics collection, Grafana dashboards the teams actually use, centralised logging, and alerts that fire on real problems rather than noise
Own production: releases, incident response, root cause, backup and restore drills, and an on-call rotation designed to stay quiet
Manage secrets and access properly (Key Vault, managed identities, Entra ID, least-privilege RBAC) and put secret, dependency and image scanning into the pipelines
Work with the Project Managers across our ventures: take in infrastructure requests, prioritise them honestly against each other, and propose the cheaper version when there is one
Plan and report your work in Azure DevOps — break requests into tasks, create your own where the work originates with you, keep status current, and raise blockers early enough that PMs can plan around them
What You Bring
3+ years in DevOps, SRE or platform engineering, with real production ownership
Strong hands-on Linux — comfortable in the shell, able to debug a failing service without a UI
Proven CI/CD experience with Azure Pipelines, GitLab CI or equivalent, including pipelines other teams depend on
Kubernetes in production: deployments, services, ingress, config and secrets, RBAC, autoscaling — and the ability to diagnose why a pod won't start or a rollout is stuck. Helm for packaging. You have built a cluster from scratch, not only deployed into one
Solid Docker fundamentals: multi-stage builds, image size, base image hygiene
Microsoft Azure: compute, networking, storage, Key Vault, managed identities, Entra ID, Azure Monitor
Infrastructure as Code with Terraform or Bicep — nice to have
Scripting in Bash plus Python or PowerShell — enough to automate a task properly instead of documenting a manual one
Networking fundamentals: DNS, TLS and certificates, reverse proxies, load balancing, VNets, subnets, NSGs, firewall rules
Databases from the operations side: backups and tested restores, connection pooling, working with developers on a slow query
Sound security instincts — you notice the exposed secret, the public endpoint, the permission nobody needed
Able to serve multiple teams with competing requests, work independently, estimate credibly and flag risk early
Good written and verbal communication in English
Our benefits include:
Medical insurance (family coverage)
Flexible working hours
Wellness program
Childcare support
Company-provided lunch
Location: Distributed
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.
At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.
Available Locations
Germany
Responsibilities
The Customer Engineer (CE) is the core driver of our technical go-to-market strategy: a trusted technical advisor and primary architect of the customer journey. You will bridge the gap between technical strategy and business value—guiding enterprise clients from initial pre-sales technical validation through onboarding, deployment architecture, and full lifecycle expansion. Sitting within the GTM organization and reporting to a Customer Engineering Leader, you will not hand off your customers once an initial agreement is reached. Instead, you will operate as a quota-carrying technologist, leveraging AI-augmented workflows to eliminate administrative toil so you can focus on high-value architectural design and driving measurable business outcomes across the entire customer journey.
Technical Validation:
Partner closely with Account Executives to lead technical deep-dive discovery, capture business requirements, and map complex customer infrastructure - DNS, CDN, Zero Trust, Network Security, Workers - to fit-for-purpose Cloudflare architectures and bespoke solutions. . Define, scope, success criteria, and technical evaluations plans for Proof of Concepts (PoCs) and Technical Validations. Deliver tailored technical presentations, architectural diagrams, and demonstrations that show how Cloudflare solves specific performance, security, and reliability challenges. Proactively address complex technical objections, security compliance questions, and edge-case architectural requirements during the sales cycle. Take accountability for a suitable solution deployment strategy (Customer, Partner or Cloudflare Professional services) being an integral part of all proposals.
Customer Adoption & Value Realization:
Provide oversight to technical onboarding and implementation, but not execute the implementation, serving as the primary executive and engineering contact for the customer. Design structured migration and onboarding blueprints tailored to the customer’s environment (e.g. DNS migrations, Zero Trust rollouts, WAF tuning guidance), and act as the lead consultant for customer engineering teams, walking them step-by-step through configuration best practices. Partner with Account Executives to own discovery, demos, onboarding, technical health, risk, and expansion strategy. Proactively monitor customer health scores and telemetry to ensure rapid time-to-value, resolve integration bottlenecks, and reduce deployment risk.
Commercial Accountability & Expansion:
Carry a variable quota tied directly to new business acquisition and/or ongoing account growth. Be commercially accountable for ensuring deep platform adoption, retaining revenue, and identifying strategic cross-sell and up-sell opportunities based on product usage data. Lead technical Quarterly Business Reviews (QBRs) to translate platform capabilities into return on investment for C-level executives.
Trusted Advisory:
Act as a trusted technical advisor throughout the entire customer lifecycle, maintaining a continuous, deep relationship with key stakeholders from initial onboarding through maturity, renewal, and expansion. Provide thought partnership on architecture, AI control layers, security posture, and deployment confidence. Identify potential deployment risks or integration bottlenecks early, and provide remediation strategies to de-risk customer outcomes.
AI Orchestration & Workflow Automation:
Leverage AI agents, Large Language Models (LLMs), and internal platforms to automate routine tasks such as RFP/Security Questionnaire responses, sandbox provisioning, basic telemetry monitoring, and internal/external documentation, reclaiming your time for strategic customer advisory.
Education & Enablement:
Partner closely with the Enablement Team to design, build, and govern technical resources. Define, document, and educate both internal teams and customers on deliverables such as Standard Operating Procedures (SOPs), architectural best practices, and technical guides to continuously raise the technical baseline across the organization.
This role may require travel up to 20–50% to attend customer meetings, conferences, industry events, and in-person team collaboration.
Desirable Skills, Knowledge, and Experience
Experience: Experience in a customer-facing technical role, such as Solutions Engineering, Customer Engineering, Professional Services, Sales Engineering, Technical Account Management, or as a Forward Deployed Engineer (years of experience required will vary based on Associate, Senior, Staff, or Principal leveling).
Architectural Mindset: Ability to white-board, design, and articulate complex enterprise network and security architectures clearly.
Consultative & Advisory Skills: Excellent communication skills with the ability to translate deeply technical concepts into business outcomes for both hands-on engineers and C-level executives.
Commercial Mindset: Proven track record of operating in a quota-carrying or revenue-aligned environment, with a strong understanding of SaaS metrics, business value translation, and enterprise sales cycles.
Communication: Exceptional presentation and stakeholder management skills, capable of bridging the gap between deep technical implementation details and high-level C-suite business strategy.
Technical Breadth: We do not expect every candidate to be an expert in every domain. Qualified candidates will demonstrate depth in at least four of the technical areas below:
Internet fundamentals: Deep understanding of how the Internet works, including OSI Model layers 1–7, BGP, GRE, TCP/UDP, DNS (authoritative and recursive), HTTP(S), and SSL/TLS.
Security: Expertise in the security of Internet properties, including WAF, Bot Management, Firewalls, Rate Limiting, (M)TLS, Zero Trust, and SASE concepts.
Performance: Expertise in the performance of Internet properties, including speed, latency, caching, video streaming, HTTP/2, and TLS 1.3.
AI Proficiency: Familiarity with prompt engineering, AI-assisted scripting and log analysis, LLM utilization, and workflow automation to augment everyday CE workflows.
Coding/Scripting: Proficiency in Python, JavaScript, Bash, Lua, Go, or similar languages to write custom integration scripts, API connectors, and edge computing functions.
Developer Platform Fluency: Experience designing, building, deploying or scaling applications using RESTful/GraphQL APIs, SDKs, webhooks, and developer tooling in cloud-native environments. Familiarity with infrastructure-as-code (Terraform, Pulumi), CI/CD pipelines, and observability for developer-led deployments.
Business Fluency in German
Bonus Points
Technical Enablement: Track record of creating and delivering technical enablement - workshops, code samples, documentation, or developer onboarding - that accelerates customer adoption of complex platforms.
Applied AI Knowledge: Experience with LLM orchestration, Retrieval-Augmented Generation (RAG) architectures, and model-access controls.
Regulatory Knowledge: Understanding of regulatory requirements such as PCI DSS, HIPAA, and SOC 2.
Hyperscaler / Digital Native Background: Talent coming out of hyperscalers, digital natives, distributed systems environments, or startups is strongly valued for its deeper cloud fluency and advanced architecture depth.
Compensation
For Germany based hires: Estimated annual salary is between €116,000 - €182,000.
This role is eligible to earn incentive compensation under Cloudflare's Sales Compensation Plan. The estimated annual salary range includes the on-target incentive compensation that may be attained in this role under the Sales Compensation Plan.
Equity: This role is eligible to participate in Cloudflare's equity plan.
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo
: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project
: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.
1.1.1.1
: We released
1.1.1.1
to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our
privacy commitment
and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual
race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.
We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at
hr@cloudflare.com
or via mail at 101 Townsend St. San Francisco, CA 94107.
Location: Paris, France; Marseille, France; Bordeaux, France; Biarritz, France; Brussels, Belgium
HEALTH CAN’T WAIT.
Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t.
Alan exists to end the wait.
Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way.
So we are building the new standard in prevention insurance. Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience.
We are on an incredible journey to build a global leading company, with a unique culture https://alan.com/en/careers. We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR.
Prevention as the new norm. That's what we're building with our team of 1000+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond.
⭐️ THE DATA FOUNDATIONS TEAM ⭐
At Alan, every decision we make about our members' care, contracts and claims is a data decision. The Data Foundations team builds the platform that makes those decisions possible in a safe way.
- Being part of the Data Foundations team means you’ll build, maintain, and improve the Data Platform used by everyone at Alan.
- We enable Alan’s data-driven nature and help our colleagues make the most of their data.
- Partner closely with people across Alan (technical and non-technical) to understand their needs and build data solutions they can trust and use effectively.
- We own and manage all data-related tools that power Alan.
- AI is changing the way companies work with data: agents are becoming first-class users of our data warehouse. It opens a world of new usage and exciting features, as well as concerns around security, data quality and governance. We are building the foundations that allow Alan to make the most of this exciting new paradigm.
- Alan is expanding quickly: we went from 4 to 6 countries this year and we won’t stop there. Our objective is to onboard new countries in weeks, not months. Having strong data foundations is a cornerstone of that expansion, allowing our teams to make sense of a patchwork of insurance systems, regulations and reporting rules.
- Examples of our missions:
- improve the developer experience when building and maintaining data pipelines,
- enable reliable and secure access to our data warehouse for Alaners and AI agents,
- strengthen security and governance around our data assets,
- define and implement standard data practices across Alan,
- maintain and evolve our core data infrastructure to accommodate Alan's international expansion and growing product breadth…
- Our core tools include Python, Airflow, Snowflake, AWS/GCP, Metabase, Terraform, dbt, and others.
- Who you'll work with: Data Foundations is a small, high-leverage team inside the Tech Foundations area, whose mission is to enable product crews through world-class infrastructure, developer experience, operational excellence, and built-in security. You'd be joining as one of its core engineers, working daily with the whole Data community at Alan.
🎯 EXPECTED SKILLS AND ABILITIES
You would thrive at Alan if most of this sounds like you:
- Passionate about owning ambitious problems and developing simple solutions for them.
- 4+ years of experience demonstrating impact in Data positions. We welcome candidates from early-career to highly experienced profiles. You may already have strong expertise in Data Engineering, or be an experienced data or software engineer looking to deepen your specialization in this area.
- Experience building and operating production data infrastructure: orchestration (Airflow or similar), a cloud data warehouse, infrastructure as code.
- Experience designing systems, tools or libraries used by other engineers, scientists or analysts.
- Proficient in Python and SQL. Setting a high standard of rigor and precision for yourself, interested in your craft.
- Curious about AI and eager to use it thoughtfully to increase your impact.
- Great listening and communication skills.
- Humble, kind, collaborative, and still willing to grow (no matter your seniority!).
- Fluent and clear in English, both oral and written (no need to speak French!).
For this role, we are looking to hire within the C1-E level range https://alan.com/en/careers/a/salary-equity.
⚙️ IMPORTANT NOTE: WE HIRE PEOPLE, NOT ROLES.
If you're excited about this opportunity but don't check every box, we'd love to hear from you. Everyone, no matter how underrepresented, should feel free to apply, as it can only bring learning or success.
If you identify yourself as a woman: Did you know that research shows women often apply only when meeting 100% of requirements?
Remember, this is just a guide, not a checklist.
We'll be thrilled to receive your application!
🔖 Check out our About Alan https://alan.com/about and Career https://alan.com/careers pages, as well as our Medium https://medium.com/alan, blog https://blog.alan.com/ and Glassdoor page https://www.glassdoor.com/Overview/Working-at-Alan-EI_IE1696043.11,15.htm for more info.
YOU WANT TO KNOW MORE ABOUT ALAN?
- 🙌 Perks & Benefits https://alan.com/en/careers/a/salary-equity: Alaners are provided with a stimulating environment and perks ensuring they are happy, efficient and spend only high-quality time with co-workers.
- 🤘 A strong culture https://alan.com/en/about/a/leadership-principles: People joining Alan are often surprised and delighted by our innovative working method. We have a set of cultural values that guide our approach to work
🔄 A quick note about the process
Note: While you're applying for a specific area, you may join a different engineering team based on where we think you'll have the most impact. Check out descriptions of other areas here https://www.notion.so/Software-Engineering-Areas-Alan-2c61426e8be7805bacd2cdbc08c32640?pvs=21.
#LI-DNP
ОфисМосква
ГибридseniorМосква
seniorChicago
УдалённоКанада, США; This role is fully remote; however, we’re only open to candidates based in the US and Canada; We strongly encourage candidates of all backgrounds to apply
УдалённоМожно работать из любой страны
middleГеография найма не уточнена
УдалённоseniorPL
Baku, Azerbaijan
seniorГеография найма не уточнена
Paris, France; Marseille, France; Bordeaux, France; Biarritz, France; Brussels, Belgium; We welcome candidates from early-career to highly experienced profiles
Автоотклики