Вакансии

Отвечать за стабильность и доступность production-систем — с полными правами и полной ответственностью за результат. Проектировать и внедрять новые инфраструктурные решения.

Within this, you will: Own features of the OpenZeppelin Contracts Library for Daml end to end, from design through audit: examples include a Timelock, access control, vaults, or token standard support. Implement and shepherd the OZ Daml versions of CIP-56, CIP-86, CIP-103, future CIPs.

Развивать ядро платформы: фреймворк Data Vault, обвязку Airflow, lineage-инструменты — проектировать API, которыми будут пользоваться другие инженеры, и нести за них ответственность. Писать библиотеки и фреймворки на Python: клиенты к источникам, инструменты тестирования пайплайнов, обёртки над инфраструктурой.

– Глубокие знания профильного банковского ПО на уровне эксперта. – Знание практик SRE / DevOps.

Ищу Senior Data Engineer, который сможет взять на себя развитие нового DWH / Lakehouse-контура и стать владельцем хранилища данных end-to-end. — перенести текущую аналитику на новую Lakehouse-архитектуру;

Location: Mumbai, India We are EnerMech, a specialist service company that delivers safe, integrated solutions for complex energy projects. For over 50 years, we've been energizing our clients across the world with unrivalled expertise, equipment, and technology that supports the entire asset life-cycle - offshore and on land. We enable progress through our three global business lines: Energy Solutions, Infrastructure & Industrial Solutions, and Lifting Solutions. Within these areas, we offer a wide range of services, including cranes, lifting, fluid power, training, equipment rental, pipeline and subsea, process, and valves - all designed to help our clients optimize performance, enhance reliability, and improve efficiency. With a focus on operational excellence, we deliver value through our customized integrated solutions. This approach reduces risk and enhances efficiencies making us a leading and trusted partner every step of the way. The Role & Responsibilities The role will be responsible for taking technical ownership of key workstreams on EnerMech's Azure Databricks data platform, operating across the full platform stack: data modelling and pipeline development in Databricks, the underlying Azure infrastructure, and the CI/CD, DevOps and DataOps practices that keep the platform reliable, secure and scalable. Working for our Enterprise Business Systems (EBS) function in the Mumbai Shared Service Centre, the role holder operates with a high degree of autonomy, makes and documents architectural decisions, resolves complex platform issues, and is a technical point of contact for the global EBS Team, and business stakeholders. Key reponsibilities will include: Design, build, quality and reliable operation of assigned workstreams on the Azure Databricks data platform, from scoping through to production deployment. Integrity of the medallion data model (bronze/silver/gold) for assigned data domains, ensuring data is modelled, validated, documented and certified for downstream reporting and analytics. Build and optimise Delta tables and materialized views, with attention to performance at scale. Design and implement data quality frameworks (preferably DQX or equivalent), including quarantine/error handling and validation against data contracts. Define job-specific compute configurations appropriate to each workload, balancing performance and cost. Contribute to and troubleshoot Terraform-managed infrastructure (networking, storage, Key Vaults, Managed DevOps Pools, Dev Centers). Own and maintain Azure DevOps build and release pipelines, variable groups/libraries, and repository security, permissions and branch policies. Support environment-level Azure configuration, including subscription-level access, RBAC for user and pipeline (service principal) identities, and Terraform state backend management across multiple storage accounts and environments. Operate autonomously across a workstream, from scoping through to production deployment. Use AI-assisted tooling to support day-to-day development, validating outputs against authoritative sources (architecture decisions, technical leads, documentation) before acting on them. Communicate clearly with technical and non-technical stakeholders, including across time zones with colleagues in the UK, Americas, Middle East and Asia Pacific. The Requirements Essential Bachelor's degree in Computer Science, Engineering, Information Systems or a related discipline, or equivalent practical experience. Typically 6+ years in data engineering, including 3+ years hands-on with Azure Databricks in production. Demonstrated ownership of medallion architecture design and data modelling. Implemented data quality frameworks and data contracts in production. Implemented PII protection (masking, tokenisation or access tiering) across environments. Platform engineering experience: diagnosing infrastructure issues, not just consuming platform services. Track record of autonomous delivery, including direct stakeholder engagement. Databricks Certified Data Engineer Associate (minimum). Desirable Databricks Certified Data Engineer Professional. Microsoft AZ-400: Designing and Implementing Microsoft DevOps Solutions. Multi-environment Azure networking (VNet peering, DNS zone design, NAT Gateway). Migrating or standing up CI/CD pipelines, incl. introducing pipeline templates/standards. Governance and identity patterns (e.g. Entra ID, RBAC scoping). Applying regulatory frameworks (e.g. GDPR) to data platform design. Shared service centre or global delivery model experience, ideally in energy or industrial services.

✔️Проектировать, развивать и сопровождать CI/CD-пайплайны на GitLab CI и TeamCity. ✔️Автоматизировать развертывание и настройку Windows-инфраструктуры с помощью Ansible/AWX и PowerShell.

Проектировать архитектуру и развивать backend-сервисы для управления инфраструктурой хранения и процессинга данных; Отвечать за техническое качество направления: код-ревью, стандарты разработки, тестирование, документацию;

Развёртывание, настройка и сопровождение инструментов безопасной разработки - OSA, SCA, SAST. Развёртывание, настройка и сопровождение средств защиты runtime k8s.

What You'll Work On. - Building and maintaining a Databricks Lakehouse on a medallion architecture.

Location: Москва Одна из самых сильных на рынке команда кибербезопасности в тесном взаимодействии с другими производственными командами СберТеха (архитекторами, разработчиками, тестировщиками и др.) принимает непосредственное участие в создании и развитии инновационного не только для российского, но и международного рынка продукта - Platform V, который будет помогать как внутренним, так и внешним пользователям быстро и просто создавать, и впоследствии эксплуатировать, нативно-безопасные low-code приложения Обязанности * Анализ угроз информационной безопасности в продуктах, бизнес-процессах и инфраструктуре, проработка предложений по использованию адекватных и оптимальных решений для нейтрализации угроз * Анализ требований по информационной безопасности в части их применимости, актуальности, тестируемости * Инсталляция, конфигурирование и администрирование средств защиты информации * Организация мониторинга, аудита, резервирования, отказоустойчивости и масштабируемости средств защиты информации * Участие в реагировании на инциденты информационной безопасности, сбор необходимой информации, выявление причин инцидентов, разработка и реализация предложений по устранению причин инцидентов * Разработка и актуализация технических схем, диаграмм, иной проектной документации в части инфраструктуры средств защиты информации * Участие в приемо-сдаточных испытаниях в части оценки исполнения требований по информационной безопасности. Требования * Опыт внедрения и сопровождения средств защиты информации, средств криптографической защиты информации * Опыт работы администратором средств защиты информации * Знание организации сетей, сетевых технологий (стек TCP\\IP, модель OSI), обеспечения безопасности сетей, технологий виртуализации и контейнеризации. * Знание и опыт написания скриптов автоматизации (bash, python) * Наличие знаний в области архитектуры и принципов функционирования механизмов безопасности операционных систем (Windows, Linux), общесистемного и прикладного программного обеспечения. * Знания современных угроз и уязвимостей, связанных с нарушением информационной безопасности, технологий, методов и средств защиты информации * Знания английского языка (чтение технической литературы) * Опыт разработки и согласования проектной документации в части требований по информационной безопасности * Навыки работы с генеративными AI-моделями. Наш техстек: NGFW, KSC, WAF, VPN, Kafka, Linux, Postgre, Jenkins, Nexus, Git / Bitbucket, Kubernetes, KCS, Terraform, Ansible, Teleport, HC Vault, nginx, OPA **Преимуществом будет**: * Опыт работы с: AI agents, MCP servers, Huawei cloud, S3, CloudAdvisor, DefectDojo, Falco * Наличие сертификатов в области информационной безопасности (CISSP, CISA, ECSA, CEH, OSCP и др.) * Наличие сертификатов в области информационных технологий (Oracle, RedHat, CCNA Security и др.). Условия * гибридный формат работы * годовой бонус и ежегодный пересмотр зарплаты * статус аккредитованной ИТ-компании * расширенный ДМС с первого дня и льготное страхование для семьи * корпоративный университет Сбера, внутренняя образовательная платформа, участие в IT-конференциях * 90 дней удаленной работы из любого региона РФ * льготная ипотека в Сбере, подписка Прайм с возможностью совместного использования на трёх близких.

Поддержка production-, staging- и development-инфраструктуры; Администрирование Kubernetes-кластеров и контейнеризированных приложений;

Требования: — Коммерческий опыт работы DevOps Engineer — от 4 лет; — Сильные знания Linux и системного администрирования; — Опыт эксплуатации production-систем и решения инфраструктурных проблем; — Практический опыт сопровождения Go-сервисов в production (deployment, мониторинг, troubleshooting); — Разработка на Go не требуется; — Коммерческий опыт работы с blockchain-инфраструктурой, желательно с blockchain nodes; — Опыт работы с Docker, Kubernetes, CI/CD и Infrastructure as Code; — Знание сетевых протоколов TCP/IP, DNS, HTTP/HTTPS, TLS; — Опыт настройки мониторинга и логирования (Grafana, Kibana); — Навыки Bash или Python. Будет плюсом: PostgreSQL, Redis, NATS, Vault, KMS/HSM, Helm, Terraform, Ansible, fintech. Задачи: — Поддержка production-, staging- и development-инфраструктуры; — Администрирование Kubernetes-кластеров и контейнеризированных приложений; — Развитие CI/CD и Infrastructure as Code; — Настройка мониторинга, логирования и алертинга; — Сопровождение Go-сервисов и blockchain-инфраструктуры; — Расследование production-инцидентов и устранение неисправностей; — Обеспечение отказоустойчивости, backup/restore и безопасности; — Документирование изменений и эксплуатационных процедур. Условия: — Гибридный формат работы в Минске; — Полная занятость; — Оформление напрямую в штат; — Долгосрочный проект.

Location: USA - Remote Workplace: Remote About Us Since 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it, so Close does the busywork and your team does the selling. No manual data entry, no 10-click workflows. Just communication-first, AI-powered sales software designed to help you succeed and scale. We're bootstrapped and profitable which means we answer to our customers and play by our rules. We're proud of our 130-person, 100% remote team, focused on building Close so that no small, scaling business fails because it can't figure out sales. ABOUT THE ROLE Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface — Python services and a large application backend, a TypeScript and React frontend, public APIs, Docker and Kubernetes, AWS infrastructure, and integrations with providers that handle sensitive customer data. Security work happens across it all today, but the ownership is spread across Engineering, Infrastructure, and Security & Trust. We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. You’ll find vulnerabilities, determine which findings matter most, and drive them through remediation. Often you’ll fix the problem yourself. Other times you’ll give the owning team a clear reproduction, a practical path forward, and enough context to prioritize correctly. You’ll analyze code, build proof-of-concepts, test running applications, tune or replace noisy tools, and automate the repetitive parts of vulnerability management. This is not a role where you forward scanner alerts and call the queue managed. Product and application security will be your responsibility. You’ll partner closely with our Infrastructure team on cloud security, access, and secrets, and with our Security & Trust Lead on GRC Engineering https://grc.engineering/, compliance (SOC 2) goals, audits, and corporate security. This role is a new one at Close. You’ll have significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk. OUR STACK Our backend is primarily Python, with Flask and FastAPI services and TaskTiger https://github.com/closeio/tasktiger and Temporal handling much of our asynchronous work. We expose REST https://developer.close.com/ and GraphQL APIs and store data in MongoDB, PostgreSQL, Elasticsearch, and Redis. Our frontend is a large single-page TypeScript application built primarily with React. We bundle with Vite, target modern browsers, and test with Vitest, React Testing Library, Playwright, and Chromatic. The product updates in near real time and uses technologies including WebSockets and WebRTC. Our mobile application is built with React Native. We build and test Docker images in CI/CD and continuously deploy them to Kubernetes on AWS. Our infrastructure uses managed services including EKS, MSK, and ElastiCache, alongside services running on EC2. Terraform and Ansible automate much of the underlying infrastructure, and our containerized local development environment lets engineers run the full system on their own machines. For this role, our stack extends beyond simply backend or frontend: browser behavior, frontend state, API authorization, asynchronous processing, data access, third-party integrations, containers, and cloud configuration can all be part of the same attack path. We love open sourcing our code and ideas on our GitHub https://github.com/closeio and on The Making of Close https://making.close.com/, our behind-the-scenes Product & Engineering blog. Check out our open source projects like SocketShark https://github.com/closeio/socketshark, TaskTiger https://github.com/closeio/tasktiger, LimitLion https://github.com/closeio/limitlion and ciso8601 https://github.com/closeio/ciso8601. AI is both how we build and what we ship, and that's reshaped what engineering looks like. This is a transformation we’re embracing and find deeply exciting. YOU ARE - An application security engineer who writes code. You can move from reading an unfamiliar code path, to reproducing an exploit, to proposing or shipping a production-quality fix. Strong Python or TypeScript experience would be especially useful; fluency across both backend and frontend systems is even better. - Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted review pipelines, guided by expert judgment, to uncover subtle flaws in web apps and APIs—from authentication, authorization, and tenant isolation to injection, SSRF, unsafe data flows, and business logic. You can threat-model designs, white-box review code, and test running systems. - Offensive-minded and operationally responsible. You know how to test like an attacker without being careless with customer data or production systems. You can turn a finding into a safe reproduction, assess exploitability and business impact, and retest the eventual fix. - An automation builder. You have worked with some mix of SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling. More importantly, you know how to tune tools, connect them to engineering workflows, and remove noise. - AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review, and repetitive engineering work, but you verify their output. You think carefully about what happens when agents clone untrusted code, install dependencies, or receive access to credentials. - Able to separate severity from priority. A score is an input, not a foregone conclusion. You consider reachability, existing controls, customer impact, and attack chains, then explain the risk in language that is legible to an engineer or business owner. - Comfortable working across the business. You’ll collaborate with product engineers, Site Reliability Engineers, Security & Trust Lead, auditors, and external researchers without confusing partnership for pass-off ownership. You will follow findings to closure even when another team is responsible for the fix. - Self-directed in a remote environment. You can take an ambiguous surface (say, secret rotation or dependency remediation) and learn how it works across multiple systems then turn it into a practical plan with measurable progress. You do not need to arrive as the deepest expert in every part of this scope. You do need to be able to investigate an unfamiliar system, determine what matters, and bring the right people with you. YOU WILL The work spans hands-on application security, security automation, vulnerability management, and infrastructure partnership. Depending on where you find the greatest risk and leverage, projects could include: - Build a recurring product security review program. Threat model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments. Work across our backend, frontend, APIs, and customer-facing integrations. - Improve application security testing. Combine static analysis, dependency and secrets scanning, dynamic testing in development, and carefully scoped production testing. Use existing tools where they fit and build focused automation where they don’t. - Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration tests, audits, customers, and internal research. Reproduce issues, assess exploitability and impact, track remediation, and verify fixes. Serve as technical lead for our bug bounty program while contract and budget ownership remain elsewhere. - Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion, deduplication, enrichment, prioritization, and routing—so teams spend less time interpreting alerts and more time fixing important issues. - Make dependency remediation safer and less manual. Improve scanning across our Python and TypeScript codebases, then build workflows to assess upgrades, stage pull requests, run checks, and route work without exposing credentials to untrusted packages or build steps. - Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory application secrets, add graceful rotation paths, document provider-specific runbooks, and automate rotation where the provider and risk justify it. Expand our use of Vault-backed dynamic credentials and reduce the number of rotations that require a coordinated fire drill. - Strengthen AWS security with Infrastructure. Evaluate and improve automated detection of risky configuration across identity, networking, compute, storage, containers, and registries. Turn findings into secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation—not build a second Infrastructure team. - Support audits and raising the security floor. Partner with Security & Trust on external assessments, provide technical context, and ensure findings are fixed rather than rediscovered. Along the way, create documentation, paved roads, and lightweight training that helps engineers make safer choices without waiting for a security review. - Take a key technical role in security incident response. Partner with Engineering and Infrastructure to coordinate investigation, containment, and remediation. Contribute to root-cause analysis and follow-up improvements, translating lessons learned into stronger controls and reduced recurrence. Tech you’ll touch: Python, TypeScript, React, Flask, FastAPI, GraphQL, Docker, Kubernetes, AWS, Vault, GitHub Actions, MongoDB, PostgreSQL, Redis, Kafka, Elasticsearch and the security tooling you help us choose. BENEFITS - Compensation: Competitive pay plus an organization-wide goal-based bonus - Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US holidays. You'll earn 2 extra days for every year you're with Close. - 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at 80% pay - Parental Leave: Paid leave for primary and secondary caregivers - Sabbatical: A 1-month paid sabbatical every 5 years with the team - Healthcare (US residents): Two medical plans with Close covering the majority of your premium, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability - 401k (US residents): We match your contributions up to 6%, vested immediately OUR VALUES Build a house you want to live in - Examine long-term thinking and action No BS - Practice transparency and honesty, especially when it’s hard Invest in each other - Build successful relationships with your coworkers and customers Discipline equals freedom - Keep your word to yourself and others Strive for greatness - Constantly challenge yourself and others LEARN MORE Listen to our CEO and Founder, Steli Efti, tell the story of Close’s journey in the $0-30m Blueprint https://www.close.com/blueprint.  Watch our culture video https://www.youtube.com/watch?v=maXKi1GN2MI from our 2023 team retreat in Milan. Every year our entire team gathers in person to build connection, foster cross-functional collaboration, and have fun. In 2027, we're headed to Dusseldorf, Germany! Explore our product. Check out a demo https://www.close.com/demo-site! OUR HIRING PROCESS We ask a few role-specific questions as part of our application process. These questions are designed to help us learn more about you from the start, so please answer each one thoughtfully. We see this as an opportunity to get to know you beyond your resume. We use AI tools daily at Close and expect candidates to do the same. In evaluating your application, we aim to get a sense for you - the way you think, how you communicate, the work you've done. Applications that read as fully AI-generated will not be considered. Regardless of fit, you can expect to hear back from our team with an update on the status of your candidacy. If you progress to the interview process, you'll receive a full outline of the role-specific steps in your first touchpoint with us. We do our best to make the hiring process clear and human.

Location: Remote - International Workplace: Remote About Somnia: SOMNIA is the Agentic Chain - a hyper-performance L1 operating at an order of magnitude faster than existing networks. We empower builders and traders to create real-time, autonomous, and fully decentralized products, powered by agents, that were previously impossible and cannot be built anywhere else. It’s where the future of Web3 protocols will be built, so we’re facilitating a new wave of on-chain applications from DEX to Prediction Protocols and much, much more. Somnia is being developed by Somnia Foundation backed by Improbable https://www.improbable.io/, a British tech Unicorn +++ that has been at the forefront of building virtual worlds for over a decade. Somnia received initial funding from MSquared https://www.msquared.io/, which raised $150 million https://www.businesswire.com/news/home/20220407005101/en/Improbable-Raises-US150m-to-Establish-M%C2%B2-MSquared-a-Metaverse-Network-and-Ecosystem-Powered-by-Its-Morpheus-Technology from a16z crypto, SoftBank, Mirana Ventures, CMT Digital, and SIG. About the Role: DreamDEX makes a hard claim: CEX execution without DEX custody. A fully on-chain CLOB with sub-10ms, zero trading fees, self-custody and transparent rules, competing head-on with Hyperliquid, Lighter and the large centralised exchanges. An exchange wins or dies on liquidity, and early liquidity comes from relationships. Market makers must sign and quote tight. Builders must route flow to us. Institutions must trust a new venue with size. You will own those relationships. You'll run business development for dreamDEX and carry the wider Somnia story (the L1, Somnia Agents, Prophecy) into institutional conversations. You'll work directly with the GTM leads and core team, with a mandate to source, structure and close the deals that put depth on the book and volume through it. We measure every deal by the liquidity, volume and TVL it produces. Key Responsibilities: - Own the market maker pipeline: source, pitch, negotiate and onboard MMs, from DeFi-native firms early on to an anchor tier 1 relationship, structuring deals across CLOB rewards, fee arrangements and liquidity commitments - Get DreamDEX integrated with the major spot and cross-chain aggregators, then manage those relationships so we keep winning flow on price - Build and activate the institutional pipeline: trading firms, funds, family offices, OTC desks, prime brokers and custodians, with white-glove onboarding for qualified institutions - Build an active Builder pipeline: Trading terminals, AI strategies and native apps to drive users and volume to the Dex. - Close liquidity deals that grow TVL: institutional LPs, protocol and DAO treasuries, and vault operators - Land distribution partnerships that feed the exchange: wallets, perp aggregators and bridges - Support broader Somnia BD where your network applies: ecosystem projects, stablecoin partners and treasury deals on the L1 - Feed market intelligence back to product: you hear first what MMs and institutions need (RFQ flow, reporting, credit arrangements, API features) and help shape the roadmap - Represent DreamDEX and Somnia at conferences and in the rooms where these deals get done Requirements: Must Have - Business development experience at a crypto exchange (CEX, perp DEX or spot DEX) covering market makers, institutional clients or listings - A real network across institutions in crypto and/or TradFi: trading firms, market makers, funds, prime brokers and OTC desks. You open doors on day one rather than building a list from scratch - Closed deals with measurable impact on volume, liquidity or TVL, and the ability to walk us through the numbers - A working understanding of exchange mechanics: order books, spreads and depth, perps and margin, liquidations, MM economics and incentive design - Ability to run a full deal cycle alone, from sourcing through structuring and negotiation to post-signature relationship management - Comfort operating early in a venue's life, when you are selling the roadmap as much as the product Nice to Have - TradFi background in prime brokerage, electronic trading or institutional sales - Existing relationships with DEX aggregators, wallets, custodians or vault operators - Experience taking a new venue through cold start; you have solved the empty order book problem before - Experience structuring token or incentive-based deals - Working knowledge of DeFi: CLOB DEXs, vaults, stablecoins and yield products - Experience selling to DAOs and protocol treasuries Why Join Somnia? Design The Future: Join Somnia to work remotely with a global team, earn competitive compensation with token incentives, and help build the future of Web3 at a company where your impact truly matters. First of its Kind: Make Somnia famous as the only hyperspeed L1 with native AI inference. High Stakes: Influence a brand targeting a $1M+ launch budget in the 2026 peak-fragility market. Incentives: Competitive salary + tokens. Role Location The role is remote, but we are looking for someone based on a UK-friendly timezone (+/- 4 hours). Reporting Lines This role reports to the Founder

- Превращать телеметрию автономного транспорта в данные, удобные для анализа: разрабатывать и запускать Spark-пайплайны, продумывать преобразования и проверки качества. - Подключать новые источники данных: разрабатывать интеграции с различными системами и обеспечивать надёжную загрузку данных в хранилище.

Описание вакансии IT-компания ARTW — один из лидеров крупной веб-разработки и внедрения корпоративных порталов, интеграции комплексных инфраструктурных решений для российского бизнеса в сферах ecommerce, ритейла, производства, телекоммуникаций и нефтегазового сектора. 20 лет на рынке, штат более 150 человек. Некоторые клиенты: НПФ Открытие, X5 Group, Газпром, О’кей, ЛУКОЙЛ, МТС, Рольф, Ростелеком, Ozon, IBS. Основные специализации: крупная веб-разработка, разработка и внедрение корпоративных порталов, мобильная разработка, продуктовая аналитика, ux/ui дизайн. Проекты компании регулярно отмечаются профессиональным сообществом, в том числе наградами конкурсов Tagline Awards, Рейтинг Рунета, Золотой Сайт и других. Требования: - IaC: Terraform, Ansible - Cloud: Cloud ru - Container orchestration: Kubernetes, Helm - CI/CD: GitLab CI/CD, GitLab Runner - Secrets: HashiCorp Vault - IAM: Keycloak - Service Mesh: Istio - Metrics: Prometheus - Visualization: Grafana - Logs: Loki, Grafana Alloy - DNS / Security: DNS, TLS, CA/PKI - AI Observability: Langfuse - Policy as Code: OPA, OPAL - OS / Automation: Linux, Bash/Python Что предлагаем: - Работу в аккредитованной IT-компании - Есть возможность работать полностью удаленно или в офисе - Индивидуальный план развития — мы готовы обучать своих сотрудников и расти вместе! Процесс собеседования: - Интервью с рекрутером ARTW (10-15 минут) - Интервью с руководителем отдела и HR (1 час) - Оффер

Location: Cyprus; Georgia; Poland; Spain; Serbia; Latvia We are looking for a Senior DevOps / Platform Engineer to develop and operate GoMining's cloud platform. The primary focus of this role is GCP and Kubernetes , infrastructure and application delivery automation, and the reliability and security of production services. You will maintain and improve our existing infrastructure, contribute to the development of the next generation of our platform, and help product teams ship changes safely and efficiently. Responsibilities Develop and operate infrastructure in GCP , including GKE, virtual machines, networking, load balancers, storage, and managed services. Manage Infrastructure as Code with Terraform : develop modules, manage state and dependencies, ensure reproducible changes, and identify configuration drift. Operate Kubernetes : upgrade clusters and platform components, configure autoscaling, workload placement, network policies, and resource allocation. Develop CI/CD and GitOps using GitLab CI and Flux / Argo CD, automating builds, checks, deployments, controlled releases, and rollbacks. Build observability across metrics, logs, distributed tracing, and actionable alerting. Define and improve SLIs/SLOs together with engineering teams. Troubleshoot production incidents and performance issues, conduct root cause analysis, and eliminate recurring failure patterns. Implement least-privilege access, environment and service isolation, secure secrets management and rotation, and infrastructure audit controls. Maintain backup processes and regularly validate recovery of critical data and infrastructure according to agreed RPO/RTO . Help engineering teams prepare services for production, including health checks, resource configuration, telemetry, and deployment procedures. Optimize cloud infrastructure usage and costs while maintaining reliability requirements. Maintain infrastructure documentation, operational runbooks, and recovery procedures. Requirements Strong hands-on experience independently operating production infrastructure and Kubernetes , including upgrades, troubleshooting, and disaster recovery. Strong experience with GCP , including GKE, Compute Engine, VPC, IAM, and Cloud Storage; good understanding of Cloud SQL, Cloud Logging, and Cloud Monitoring. Hands-on experience with Terraform , including modules, remote state, locking, importing existing resources, and safely applying infrastructure changes through CI. Deep knowledge of Kubernetes and containerization : Deployments, StatefulSets, Services, Ingress, storage, requests/limits, probes, autoscaling, RBAC, and NetworkPolicy. Experience with Helm and Kustomize . Strong Linux administration skills, preferably Debian/Ubuntu: processes, systemd, filesystems, disks, and resource troubleshooting. Strong networking fundamentals: TCP/IP, DNS, HTTP(S), TLS, routing, NAT, load balancing, and firewalls. Ability to troubleshoot connectivity issues across applications, Kubernetes clusters, networks, and cloud services. Experience building CI/CD pipelines, preferably with GitLab CI , and strong understanding of Git and GitOps principles. Understanding of runner permissions, secrets protection, and production deployment controls. Automation skills with Bash and Python , including maintainable infrastructure scripts and API integrations. Experience with monitoring, logging, and alerting using tools such as Prometheus, Grafana, or Cloud Monitoring . Practical experience operating PostgreSQL and understanding Redis and RabbitMQ, including availability, connections, replication or clustering, backup, and recovery. Strong understanding of cloud security principles: least privilege, service accounts, Workload Identity, secrets management, network segmentation, and access auditing. Ability to independently deliver infrastructure changes to a validated production result, explain technical trade-offs, and collaborate effectively with Engineering and Security teams. Nice to Have Experience with Flux CD, Argo CD, Ansible, and HashiCorp Vault . Experience with OpenTelemetry and distributed tracing. Experience migrating infrastructure between clouds or Kubernetes clusters, including database migrations with limited downtime. Experience designing disaster recovery strategies and conducting recovery exercises. Cloud cost optimization and capacity planning experience. Experience with DigitalOcean, Hetzner, or AWS . Ability to read and troubleshoot JavaScript / TypeScript applications. Experience operating financial or payment services with strict requirements around access control, auditing, reliability, and data integrity. Benefits Professional growth: support for courses, conferences, and English learning (up to 100% coverage). Work-life fit: remote or hybrid format with flexible hours across international teams. Paid leave: up to 20 vacation days +  8 company holidays + 5 personal days per year Recognition programs: structured performance reviews and team awards. Team culture: retreats in international locations (for example, company apartments in Cyprus).