{"id":3258189,"url":"https://alion.io/job/0glabs-senior-devops-engineer","title":"Senior DevOps Engineer","company":{"id":6744,"name":"0Glabs","domain":"0glabs.com","url":"https://alion.io/company/0glabs","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":["SG"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":191000,"period":"year","method":"global_role_seniority_cell","sample_n":3508},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Apache Kafka","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Blue-Green Deployment","optional":false},{"name":"CI/CD","optional":false},{"name":"CircleCI","optional":false},{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"Gateway API","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Karpenter","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kustomize","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"MySQL","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Pulumi","optional":false},{"name":"Python","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"Tekton","optional":false},{"name":"Terraform","optional":false},{"name":"Vercel","optional":false},{"name":"Zero Trust","optional":false},{"name":"FinOps","optional":true},{"name":"Google BigQuery","optional":true},{"name":"Google Cloud Run","optional":true},{"name":"Google GKE","optional":true},{"name":"Rust","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-26T02:31:51Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-28T18:59:20Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About the role\n0G is hiring its first dedicated DevOps engineer to own our cloud platform end to end: infrastructure, deployments, networking, security hygiene and cost. Today that work is spread across several developers.\nOur platform runs on five providers: Google Cloud, Alibaba Cloud, AWS, Cloudflare and Vercel. It includes:\nValidator, seed, RPC, and archive nodes for our mainnet and testnet\n\nConfidential-computing (TEE) workloads, GPU machines and storage nodes\n\nKubernetes clusters and managed databases\n\nA global RPC load balancer at the edge, and our web apps\n\nAll together, that is more than 200 virtual machines. You will be the person who knows what runs where, why it runs there, and what it costs.\nWhat you'll own\nYou own the platform, from the network edge to the bill.\nCloud operations: provisioning, upgrades, capacity and the full resource lifecycle on Google Cloud, Alibaba Cloud and AWS. That includes rightsizing and releasing what nobody uses.\n\nKubernetes: run, upgrade and scale our clusters. Keep them on supported versions and design node pools, autoscaling and Spot capacity.\n\nBlockchain node fleet: operate validator, sentry, seed, RPC and archive nodes, including peering topology, snapshots, sync and client upgrades.\n\nNetworking and edge: VPC design, load balancers, DNS, Cloudflare Workers, Tunnels and WAF, and keeping internet egress deliberate and cheap.\n\nInfrastructure as code and CI/CD: every environment defined in Terraform or Pulumi. You design and run CI/CD on Jenkins or an equivalent such as GitHub Actions or GitLab CI, covering builds, tests, security scans and releases from commit to production, with no manual steps.\n\nObservability and on-call: metrics, logs, alerts and dashboards, including control of metric cardinality. You also run incident response and write the postmortems.\n\nSecurity and access: least-privilege IAM across every provider, secrets management, and no databases or admin ports open to the internet.\n\nCost management: billing exports, budgets and alerts, tagging, a monthly cost review and commitment planning.\n\nDeveloper enablement: templates, preview environments, documentation and support for the engineers who ship on the platform.\n\nOur stack\nKubernetes: GKE, EKS, Helm, Ingress and Gateway API, autoscaling, RBAC, network policies\nNetworking: TCP/IP, subnets and CIDR, routing, NAT, L4 and L7 load balancers, DNS, TLS, firewalls, VPC peering\nGoogle Cloud: Compute Engine, GKE, Cloud SQL, Cloud Run, IAM, Cloud Monitoring, billing export to BigQuery\nInfrastructure as code: Terraform, Pulumi\nCI/CD and containers: Jenkins or an equivalent (GitHub Actions, GitLab CI), Argo CD, Docker and BuildKit, container registries\nObservability: Prometheus, Grafana, Cloud Monitoring, CloudWatch, Alibaba CloudMonitor\nLinux: Systems administration, systemd, disks and filesystems, performance debugging\nAlibaba Cloud: ECS, VPC, NLB and ALB, ESSD disks, RDS, PolarDB, SAE, Cloud Firewall\nAWS: EC2, EKS, RDS, ALB and NLB, Route 53, S3, Organizations\nCloudflare: DNS, Workers, Tunnels, WAF and rate limiting, Zero Trust\nDatabases (operations): PostgreSQL, MySQL, MongoDB, managed Kafka\nBlockchain nodes: CometBFT-based chains, reth and other EVM clients, P2P networking\nVercel: Projects, builds, ISR, team access\nConfidential computing: Intel TDX virtual machines on Google Cloud and Alibaba Cloud\nMust-haves\nWe want 5+ years in DevOps, SRE or platform roles, including 3+ years running production Kubernetes and owning CI/CD pipelines.\n\nKubernetes, in depth\nUpgrading control planes and node pools with no downtime, and keeping clusters on supported versions.\n\nScheduling: requests and limits, affinity, taints and tolerations, priority, and eviction under node pressure.\n\nAutoscaling with the HPA, cluster autoscaler or Karpenter, plus Spot or preemptible node pools for non-critical work.\n\nNetworking inside the cluster: CNI, Services, Ingress or Gateway API, network policies, and DNS within the cluster.\n\nSecurity: RBAC, Pod Security, workload identity, and secrets that never sit in plain environment variables.\n\nStateful workloads: StatefulSets, persistent volumes and CSI drivers, and backup and restore.\n\nPackaging and delivery with Helm or Kustomize, ideally through GitOps with Argo CD or Flux.\n\nDebugging a failing pod, node or rollout from events, logs and metrics.\n\nCI/CD, in depth\nPipeline design: you have built and run production CI/CD on Jenkins or an equivalent (GitHub Actions, GitLab CI, CircleCI, Tekton). Pipelines are defined as code in a Jenkinsfile or workflow YAML, with shared libraries and reusable templates.\n\nCI platform operations: running Jenkins controllers with ephemeral agents on Kubernetes, or self-hosted runners. That includes plugin and version upgrades, credential handling, and scaling build capacity.\n\nBuild pipelines: multi-service and monorepo builds with caching and parallel stages, and versioned artifacts. Container images built with Docker, BuildKit or Kaniko, including multi-architecture images, image scanning, SBOMs and signing.\n\nDeployment pipelines: promotion from dev to staging to production with approvals and quality gates, plus blue-green, canary and fast rollback. GitOps with Argo CD or Flux, and database migrations as part of a release.\n\nInfrastructure pipelines: Terraform or Pulumi plan and apply from CI, with policy checks and drift detection.\n\nPipeline security: short-lived credentials through OIDC federation or a secrets vault instead of long-lived keys, least-privilege deploy roles, and protected branches.\n\nRelease engineering for our chain: building and publishing node binaries and images, and coordinating rolling upgrades across validator and RPC fleets.\n\nDelivery health: you track build time, build cost, flaky tests and DORA metrics (deployment frequency, lead time, change failure rate, time to restore), and you cut wasted builds with ignore rules and caching.\n\nNetworking fundamentals\nTCP/IP, subnetting and CIDR, routing, NAT, and the difference between L4 and L7 load balancing.\n\nDNS, TLS and certificates, firewalls and security groups.\n\nPrivate connectivity: VPC design, peering, private endpoints, and keeping internal traffic off public IPs.\n\nTroubleshooting with dig, curl, mtr and tcpdump, and understanding what internet egress costs.\n\nAlso required\nProduction experience on at least two of Google Cloud, AWS and Alibaba Cloud, and willingness to learn the third quickly.\n\nTerraform or Pulumi in production, plus scripting in Bash and in Python or Go.\n\nA track record of cutting a cloud bill with data, through rightsizing, cleanup or commitments.\n\nA security-first habit with production credentials, and clear written communication.\n\nNice to have\nRunning blockchain nodes in production, such as CometBFT validators and sentries, EVM archive or RPC nodes, and snapshot pipelines.\n\nCloudflare Workers, Tunnels and Zero Trust at scale.\n\nAlibaba Cloud on the international site, including its billing and support model.\n\nConfidential computing (Intel TDX) and GPU workloads.\n\nCKA or CKS certification, a FinOps certification, or experience moving a team between CI systems, such as Jenkins to GitHub Actions.\n\nGo or Rust, enough to read and patch the services you operate.\n\nWhat we offer\nPurpose: The opportunity to contribute to making AI a public good\n\nGrowth: A self-directed environment where you can take initiative to shape your role and career\n\nCompensation: Market-competitive compensation including, for most roles, exposure to pre-launch tokens\n\nIn addition, 0G Labs is committed to the health and well being of all of our team members. To that end, we provide reimbursements towards a holistic set of experiences and courses:\nCore self: Transcendental Meditation\n\nMind: Landmark Education\n\nEmotion: Art of Communication\n\nPresence: Speech Coach\n\nBody: Fitness, gym and exercise memberships/classes","description_format":"text","description_chars":7861,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-26T02:58:24Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":29,"reasons":["conf:0","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/0glabs-senior-devops-engineer","json_url":"https://alion.io/job/0glabs-senior-devops-engineer.json","meta":{"generated_at":"2026-10-28T22:27:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30447,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6744},"rest":"https://alion.io/mcp/rest/get_company?id=6744"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2F0glabs-senior-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2F0glabs-senior-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2F0glabs-senior-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/0glabs-senior-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2F0glabs-senior-devops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3258189}},{"tool":"search_jobs","arguments":{"company":"0glabs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3258189},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}