Position: Systems and Network Analyst
Company: Launch & Scale
Category: Security
Experience required: 3y
English level: fluent

Our client is a rapidly growing team of engineers building simple, functional, and most importantly, useful privacy and security products used by millions of people.
Their ambition is to transform the Internet with easy-to-use yet powerful tools that will enable anyone to bypass censorship, access geographically restricted content, and minimize the impact of marketers, criminals, and surveillance. Among the client's flagship software products are proprietary (true!) VPN, a DNS-based Internet content filtering solution, and others.

On behalf of our client, we are looking for a skilled **Systems and Network Analyst **whose main responsibility will be to ensure the availability and stability of production systems.

**Primary Accountabilities:**
- Monitoring customer facing vpn/proxy infrastructure for any potential issues
- Diagnosing and performing basic troubleshooting of any network issues that arise
- Review periodic reports on network performance
- Identify trends or patterns for building new reports and alerts
- Creating and updating documentation pertaining to common troubleshooting procedures
- Optimizing server capacity and performance to meet network traffic, cpu and memory
demands
- Remotely assisting with installing, configuring, and updating networking accessories for
end-users using VPN, proxy and DNS products
- Running diagnostic tests to monitor the interaction between computers, servers,
modems, and routers
- Providing technical support to customers by performing troubleshooting when the system
malfunctions
- Collaborating with the infrastructure team to develop and maintain network infrastructure
- Respond to node outages
- Maintaining an accurate inventory of all company hardware and software
- Act as a front-line helpdesk for all internal staff
- Assist customers with setup and troubleshooting of VPN and DNS issues
- Installation and troubleshooting of custom DNS resolvers on a router
- Being able to look at customer traceroutes and identify what's happening
- Escalate billing or advanced issues to senior systems team members
- Perform daily/weekly/monthly recurring tasks
- Inbox and shared calendar management
- Trend reviews
- Capacity planning
- Silence/Alarm review
- Provider billing review
- Updating documentation or runbooks for common troubleshooting flows for both customer
and internal facing

**Skills & Competencies**
- Effective execution skills
- Excellent organizational, collaboration, and communication skills
- Self-motivation and excitement about working on hard problems
- Excellent analytical and critical thinking skills
- Ability to work within a multidisciplinary team
- High level of initiative to take projects from start to finish with minimal supervision
- Strong attention to detail
- Ability to prioritize, manage time effectively and be flexible in a very active work
environment
- Good understanding of networking concepts (OSI model, TCP/IP, Application layer
Protocols)
- Experience with the Linux operating system
- Basic understanding of file systems and permissions
- Basic understanding of firewalls (iptables)
- Experience with systems command line tooling (tracers, dig, tcpdump, ps, top, etc)

**Additional Nice to Haves:**
- CompTIA A+ certification
- CompTIA Network+ certification
- RHEL or some kind of Linux certification
- Understanding of VPN technologies

**The company offers:**
- Work with successful products with a multi-million audience
- Long-term employment with possibilities for professional growth
- Fully remote work
- Flexible schedule
- 13 days of paid vacation
- Regular performance reviews
- Strong engaged international team (level Senior+)
- Possibility to influence the product and implement your ideas
- If you are interested in hacking, computer security, and data protection 
- No bureaucracy

**What You’ll Learn**
- How to manage, configure and troubleshoot
- Operating system issues
- Storage (Block Storage, Object Storage)
- Networks and Firewalls
- CDN’s, Reverse Proxies and Load Balancers
- Hypervisors and Containerization
- Networking concepts, tooling and technology
- Linux iptables/nftables, eBPF
- BIND, PowerDNS, Unbound
- Netplan, Systemd-networkd
- iptables / nftables
- Performance Tuning (sysctl and NIC tuning)
- IPv4 and IPv6
- Dynamic Routing (BGP)
- Working with IP transit providers and NOC’s
- Anycast Networks
- VLANs, Trunking, LACP, LAG’s
- VPN protocols
- OpenVPN
- Wireguard
- IKEv2 (Strongswan)
- Proxy Types: Forward, Transparent and Reverse Proxying
- Load balancers and Web Servers: HAproxy, nginx
- Building and managing CICD pipelines and orchestration systems with Gitlab
- Observability Suite, Monitoring and Instrumentation
- Prometheus, VictoriaMetrics, Grafana and Alertmanager and related
- Webhook/Pagerduty integrations
- Log management and SIEM systems: Syslog-NG, Splunk, Loki, ELK
- Incident Response / Incident Response Management Systems: PagerDuty, OpsGenie
- Identity and Access Management
- Standards: SAML 2.0, OIDC
- Services: Okta, Auth0, Keycloak
- Source Control, CI/CD and Issue Tracking with Gitlab
- Artifact and Object Storage with Nexus, Minio and Ceph
- Engineering Practices: availability, reliability and scalability, disaster recovery and business continuity
- How censorship (and our anti-censorship mechanisms) works
- How to triage real-world global-scale network problems
- Exposure to how ISPs operate globally
- A unique under-the-hood view of how the Internet works
- Day-to-day interfacing and mentorship with senior engineers