Position: Senior Site Reliability Engineer (SRE)
Company: Launch & Scale
Experience required: 5y
English level: upper

Our client is a rapidly growing team of engineers building simple, functional, and most importantly, useful privacy and security products used by millions of people.
Their ambition is to transform the Internet with easy-to-use yet powerful tools that will enable anyone to bypass censorship, access geographically restricted content, and minimize the impact of marketers, criminals, and surveillance. Among the client's flagship software products are proprietary (true!) VPN, a DNS-based Internet content filtering solution, and others.

On behalf of our client we are looking for a skilled site reliability engineer to join their systems/infra team. The client has a ton of infrastructure to manage and build out:

– Private clouds running on bare metal hardware at their colocation facilities in Canada and abroad
– Geo-distributed anycast DNS and Proxy network
– VPN node network of hundreds of servers spread over 100+ data-centers globally

The systems team is responsible for provisioning, updating, patching, availability, latency, performance, efficiency, monitoring, emergency response, network engineering, and capacity planning.

What you’ll do:

– Identify, document and automate repetitive or critical processes/workflows to lower the workload for the systems team
– Build out critical infrastructure required to complete our ambitious company road-maps
– Design, configure, monitor and maintain both networks, private clouds and internal tools.
– Liaison with data-center providers from around the globe to scale capacity or mitigate production issues

The ultimate goal for SREs is to, as Google puts it, “automate their way out a job.”

What you’ll need:

– Excellent organizational skills
– Self-motivation and excitement about working on hard problems
– 5+ years of site reliability engineering experience
– Excellent knowledge of networking concepts, tooling and technology
   -- BGP (Routing IPv4/V6)
   -- JunOS, iptables/nftables, VyOS
   -- Netbox IPAM
   -- OpenVPN, Strongswan, Wireguard

– Excellent knowledge of Linux systems:
   -- Ubuntu, Debian
   -- Netplan, Systemd
   -- Kernel hardening
   -- Performance tuning

- Excellent knowledge and experience with:
   -- DevOps Tooling: Gitlab, HashiCorp Vault, Consul, Serf, Packer, Terraform
   -- Hypervisors/Containerization: VMWare ESX/vCenter, Docker, Proxmox/KVM
   -- Monitoring: Prometheus/VictoriaMetrics, AlertManager, Grafana, OpsGenie, PagerDuty
   -- Observability/Logging: Syslog-ng, Splunk
   -- DNS: Bind, PowerDNS, Unbound
   -- Security/Auth: OpenSSL, TLS, SAML/OAuth, Okta
   -- Databases: Redis/Sentinel, Memcached, MySQL/ProxySQL, MongoDB, ProxySQL
   -- Load Balancers/Web servers: Nginx, HAProxy

- Development experience in Bash, Python, Golang or Rust
- Good English (written and spoken)

How the client will help:

– Goals: Provide clear and concise objectives along with the resources to succeed
– Process: Develop the best internal processes to empower better work, through iteration, measurement and continuous improvement.
– Autonomy: We trust you to be excellent at what you do. We will provide as much support as needed when needed, but no more. You will have autonomy and agency to drive projects forward, and own decisions and outcomes.
– Education: Provide access to resources like books, courses, and deep technical challenges that will keep your skills improving continuously

The company offers:

- work on successful products with a multi-million audience
- long-term employment with possibilities for professional growth
- fully remote work
- flexible schedule
- 10 days of paid vacation
- 6 sick-leaves
- regular performance reviews
- strong engaged international team (level Senior+)
- possibility to influence the product and implement your ideas
- if you are interested in hacking, computer security, data protection - you will learn a lot.
- no bureaucracy