{"id":3345190,"url":"https://alion.io/job/free-vpn-planet-s-r-l-senior-devops-engineer-b2b","title":"Senior DevOps Engineer (B2B)","company":{"id":1830818,"name":"FREE VPN PLANET S.R.L","domain":"freevpnplanet.com","url":"https://alion.io/company/freevpnplanet","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"PeopleForce","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Alertmanager","optional":false},{"name":"Ansible","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"BGP","optional":false},{"name":"cert-manager","optional":false},{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"External Secrets","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"Harbor","optional":false},{"name":"Helm","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Loki","optional":false},{"name":"OSPF","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Proxmox VE","optional":false},{"name":"Python","optional":false},{"name":"RabbitMQ","optional":false},{"name":"Redis","optional":false},{"name":"StrongSwan","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"Terraform","optional":false},{"name":"Traefik","optional":false},{"name":"VPN","optional":false},{"name":"Yandex Cloud","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"Snort","optional":true},{"name":"Suricata","optional":true},{"name":"Zeek","optional":true}],"status":"live","first_seen_at":"2026-10-27T16:57:36Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T23:08:30Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"We build a Zero Trust Network Access platform for companies that have outgrown the corporate VPN. Our customers are security and IT teams who need every access request from every user and every device to be authenticated, authorized against policy, and recorded - with no implicit trust granted by network location.We are looking for an experienced Senior DevOps Engineer who thrives on solving complex challenges and is ready to make a massive impact on a high-traffic product at the intersection of security, massive scale, and digital freedom.\nAbout the role:\nInfrastructure architecture - design and evolution of the platform: K8s clusters, GitOps, networking, secrets, observability, VPN data plane. Technology choices and trade-off analysis, multi-region topology, migration planning.\nRouting architecture of the VPN data plane - design and operation of the dynamic routing layer: BGP / OSPF on FRR, route propagation between regions and gateways, policy-based routing and multiple routing tables, failover and traffic-steering scenarios.\nComplex infrastructure tasks - work that isn't delegated: debugging network connectivity and VPN routing, scaling, disaster recovery, designing egress / site-to-site / edge topologies, non-standard networking scenarios\nBuild & software delivery - CI/CD pipelines, container image builds, and delivery to environments (dev/stage/prod) via GitOps. Application source code is owned by the respective backend and frontend team leads; this role owns the build and delivery mechanism (and all infrastructure beneath it), not the application code itself.\nMentoring & code review - reviewing infrastructure code, mentoring junior DevOps engineers, helping distribute and unblock their work.\nWhat we are looking for:\n Dynamic routing & Policy-Based Routing on Linux (must have) FRRouting (FRR) - production experience: zebra / bgpd / ospfd, vtysh, config management and version control of routing configs, upgrades, troubleshooting adjacencies and route installation into the kernel.\n BGP - eBGP / iBGP peering, route-maps, prefix-lists, communities, AS-path filtering, next-hop handling, ECMP / multipath, BFD, graceful restart; announcing service and gateway prefixes (incl. anycast-style edge setups).\nOSPF - areas and cost/metric design, adjacency and LSA troubleshooting, redistribution between OSPF and BGP, interaction with tunnel interfaces.\n Policy-Based Routing (PBR) - ip rule + multiple custom routing tables, source-based and fwmark-based routing (nftables / iptables marking), VRF-style routing and network-namespace isolation, multi-uplink egress selection.\nRouting diagnostics - ip route get, ip -6, tcpdump, ss, mtr / traceroute; debugging asymmetric routing, route leaks, MTU / MSS and blackholing issues across tunnels.\n Networking & VPN data-plane expertise (critical) VPN protocols: current - OpenVPN (with obfuscation), XRay, IKEv2 / IPsec; future - AmneziaWG / WireGuard and similar\n RADIUS / RadSec (RADIUS-over-TLS), FreeRADIUS, StrongSwan / IPsec\n Linux networking - TCP/IP, TLS, NAT / MASQUERADE (nftables / iptables), tun/tap, kernel routing\nKubernetes & orchestrationStrong production experience with Kubernetes - managed clusters, multi-cluster setups\nHelm - authoring shared chart libraries, dependency management, per-environment value overlays\n Harbor (or equivalent container registry)\nGitOps & CI/CDArgoCD - ApplicationSets, AppProjects, multi-cluster deployments, sync policies / sync windows\nGitLab CI - pipelines, multi-project triggers, reusable templates\nOwning the image-build and software-delivery process across environments\nIaC & provisioningTerraform - provisioning across public clouds and virtualization platforms: OVH, AWS, Yandex Cloud, Proxmox\nAnsible - configuration management and server provisioning\nSecrets Infisical (or Vault / equivalent)\nExternal Secrets Operator\n Stateful services (K8s operators) CloudNativePG (PostgreSQL) - clusters, backups, WAL / PITR\nRabbitMQ Cluster Operator\n Redis (ot-container-kit)\n Centrifugo (realtime messaging)\nNetworking, Ingress, TLS, DNSTraefik - IngressRoute / IngressRouteTCP, split-LB\n cert-manager - Let's Encrypt (DNS-01)\nexternal-dns, Cloudflare\n CoreDNS (split-horizon), PowerDNS\nStakater Reflector\nObservabilityPrometheus / kube-prometheus-stack, Grafana, Loki, Alloy, Alertmanager\n Programming (infrastructure microservices & automation) Go - network gateway services (PBR / NAT / firewall, DNS reconciler)\nBash, Python\nNice to Have:\nExperience with security systems that inspect network traffic for malicious code - IDS / IPS, DPI (e.g., Suricata, Snort, Zeek).\nRoute-server / IXP peering experience, RPKI / route-origin validation.\nExperience automating FRR configuration (templating, reconciliation, config drift detection).\nWhat We Offer:\nBuild personal AI agents using our premium infrastructure.\nInternal R&D opportunities.\nPaid time off and sick leave.\nDirect impact on a massive, world-class B2B product.\nA collaborative environment with some of the best minds.\nHardware upon completion of your probation.","description_format":"text","description_chars":5050,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["VPN & Proxy Services"],"lifecycle":[{"event":"open","at":"2026-10-27T16:57:36Z"}],"visa":[],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.805,"p_room":0.578,"age_days":4,"expected_fill_days":4,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/free-vpn-planet-s-r-l-senior-devops-engineer-b2b","json_url":"https://alion.io/job/free-vpn-planet-s-r-l-senior-devops-engineer-b2b.json","meta":{"generated_at":"2026-11-02T00:28:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":763,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1830818},"rest":"https://alion.io/mcp/rest/get_company?id=1830818"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffree-vpn-planet-s-r-l-senior-devops-engineer-b2b"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffree-vpn-planet-s-r-l-senior-devops-engineer-b2b"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffree-vpn-planet-s-r-l-senior-devops-engineer-b2b"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/free-vpn-planet-s-r-l-senior-devops-engineer-b2b\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffree-vpn-planet-s-r-l-senior-devops-engineer-b2b"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3345190}},{"tool":"search_jobs","arguments":{"company":"freevpnplanet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3345190},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}