- Location
- Київ, місто Київ
- Type
- Full-time
- Department
- Engineering
- Seniority
- Senior
- Source
- RecruiterFlow
Description
About the company:
We are an Israeli-based IPTV platform operating globally. Due to the high-security nature
of our infrastructure, we operate under a strict NDA. We offer a high-performance
environment where technical excellence and discretion are our top priorities.
of our infrastructure, we operate under a strict NDA. We offer a high-performance
environment where technical excellence and discretion are our top priorities.
About the project:
We're looking for an experienced DevOps engineer to automate, maintain, and grow the
infrastructure of a high-load streaming platform. You'll work in tandem with the Lead
Architect, taking ownership of deployment routines, writing automation (Ansible),
deploying in-house applications, and ensuring fault tolerance (mirrors, replication,
backups).
Our fleet includes ~30 bare-metal Linux (Ubuntu) servers and ~9 Windows servers
streaming video at 10Gbps+ speeds. The project requires a high level of OpSec, block
circumvention, and maintaining infrastructure anonymity.
We're looking for an experienced DevOps engineer to automate, maintain, and grow the
infrastructure of a high-load streaming platform. You'll work in tandem with the Lead
Architect, taking ownership of deployment routines, writing automation (Ansible),
deploying in-house applications, and ensuring fault tolerance (mirrors, replication,
backups).
Our fleet includes ~30 bare-metal Linux (Ubuntu) servers and ~9 Windows servers
streaming video at 10Gbps+ speeds. The project requires a high level of OpSec, block
circumvention, and maintaining infrastructure anonymity.
Key responsibilities:
• Infrastructure automation (IaC): writing from scratch and maintaining Ansible playbooks
for server provisioning, network configuration, dependency installation, and service
deployment.
• Automation scripts will continuously go through a "review–refactor" cycle to meet
corporate standards and best practices.
• Scripting: developing reliable Bash and Python scripts to automate routine tasks, IP
address rotation, tunnel management, and backups.
• CI/CD and deployment: deploying and maintaining in-house microservices and
applications written in JS/TS (Node.js) and C# (.NET). Managing containerization
(Docker).
• Database management: deploying, configuring, and monitoring MySQL/MariaDB and
Redis clusters in a Master-Slave topology with automatic failover.
• Disaster recovery & synchronization: setting up transparent data and server mirroring
between different data centers (rsync, ZFS replication, DRBD, lsyncd, or similar
block/filesystem-level solutions, plus "infrastructure as code" approaches for syncing
settings without data).
• OpSec & network: maintaining hidden infrastructure (WireGuard, Stunnel,
Nginx/HAProxy reverse proxies, XRay, etc.), configuring firewalls (iptables/ufw) and
whitelists.
• Monitoring: setting up monitoring systems (Prometheus exporter, Grafana, Zabbix),
developing custom metric monitoring scripts and connecting them to shared systems,
configuring automatic incident alerts, and organizing/participating in an on-call shift
schedule.
• Infrastructure automation (IaC): writing from scratch and maintaining Ansible playbooks
for server provisioning, network configuration, dependency installation, and service
deployment.
• Automation scripts will continuously go through a "review–refactor" cycle to meet
corporate standards and best practices.
• Scripting: developing reliable Bash and Python scripts to automate routine tasks, IP
address rotation, tunnel management, and backups.
• CI/CD and deployment: deploying and maintaining in-house microservices and
applications written in JS/TS (Node.js) and C# (.NET). Managing containerization
(Docker).
• Database management: deploying, configuring, and monitoring MySQL/MariaDB and
Redis clusters in a Master-Slave topology with automatic failover.
• Disaster recovery & synchronization: setting up transparent data and server mirroring
between different data centers (rsync, ZFS replication, DRBD, lsyncd, or similar
block/filesystem-level solutions, plus "infrastructure as code" approaches for syncing
settings without data).
• OpSec & network: maintaining hidden infrastructure (WireGuard, Stunnel,
Nginx/HAProxy reverse proxies, XRay, etc.), configuring firewalls (iptables/ufw) and
whitelists.
• Monitoring: setting up monitoring systems (Prometheus exporter, Grafana, Zabbix),
developing custom metric monitoring scripts and connecting them to shared systems,
configuring automatic incident alerts, and organizing/participating in an on-call shift
schedule.
• Documentation: creating and maintaining documentation in markdown format,
diagrams, and instructions, plus maintaining decision logs for key issues.
• AI-driven testing: readiness to write end-to-end (E2E) tests using Playwright or similar
tools with the help of AI. Active use of ChatGPT, GitHub Copilot, Cursor, etc. is expected
to speed up writing tests and supporting code.
diagrams, and instructions, plus maintaining decision logs for key issues.
• AI-driven testing: readiness to write end-to-end (E2E) tests using Playwright or similar
tools with the help of AI. Active use of ChatGPT, GitHub Copilot, Cursor, etc. is expected
to speed up writing tests and supporting code.
Required stack and skills:
• Teamwork: ability to work in a team, develop infrastructure in line with adopted policies
and standards, and contribute to their evolution.
• OS: deep understanding of Linux (Debian/Ubuntu), basic experience administering
Windows Server.
• DevOps/Automation: excellent command of Ansible, Docker, confident scripting in Bash
and Python.
• Databases: hands-on experience setting up Master-Slave replication for MySQL and
Redis.
• Network & security: understanding of TCP/IP, experience with VPN (WireGuard), proxy
servers, understanding of DDoS protection principles and origin-server concealment.
• Redundancy: understanding of server mirroring principles and synchronizing stateful
data between data centers.
• QA/Testing: knowledge of testing fundamentals, readiness to write automated tests in
Playwright / Jest with the help of AI.
• Teamwork: ability to work in a team, develop infrastructure in line with adopted policies
and standards, and contribute to their evolution.
• OS: deep understanding of Linux (Debian/Ubuntu), basic experience administering
Windows Server.
• DevOps/Automation: excellent command of Ansible, Docker, confident scripting in Bash
and Python.
• Databases: hands-on experience setting up Master-Slave replication for MySQL and
Redis.
• Network & security: understanding of TCP/IP, experience with VPN (WireGuard), proxy
servers, understanding of DDoS protection principles and origin-server concealment.
• Redundancy: understanding of server mirroring principles and synchronizing stateful
data between data centers.
• QA/Testing: knowledge of testing fundamentals, readiness to write automated tests in
Playwright / Jest with the help of AI.
Nice to have (or willing to learn):
• Experience with streaming software (FFmpeg, Nimble, Xtream, Emby).
• Experience tuning the Linux kernel (sysctl) for 10Gbps+ network loads.
• Skills working with media storage filesystems (MergerFS/AList).
• Experience with streaming software (FFmpeg, Nimble, Xtream, Emby).
• Experience tuning the Linux kernel (sysctl) for 10Gbps+ network loads.
• Skills working with media storage filesystems (MergerFS/AList).
What we offer:
• Work on non-trivial tasks (block circumvention, "one-click" migrations, anonymization).
• No micromanagement: you work directly with the Lead Architect.
• Work format — office in central Kyiv or hybrid.
Skills
PythonNode.jsDockerAnsibleCI/CDLinuxNginxMySQLRedisGitHubTCP/IPDevOpsMicroservices