{"id":3983380,"url":"https://alion.io/job/koton-devops-infrastructure-engineer-trading-systems","title":"DevOps / Infrastructure Engineer — trading systems","company":{"id":2755669,"name":"Koton","domain":"koton.com","url":"https://alion.io/company/koton-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brno, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"GitLab","optional":false},{"name":"Google Workspace","optional":false},{"name":"Grafana","optional":false},{"name":"HAProxy","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Loki","optional":false},{"name":"OpenTofu","optional":false},{"name":"pfSense","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Proxmox VE","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"TimescaleDB","optional":false},{"name":"VPN","optional":false},{"name":"C#","optional":true},{"name":"IAM","optional":true},{"name":"Least Privilege","optional":true},{"name":"Time Series","optional":true}],"status":"live","first_seen_at":"2026-11-09T15:49:11Z","employer_posted_date":null,"last_verified_at":"2026-11-09T15:49:11Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"TL;DR\nProprietary trading firm in Brno. We trade our own capital on crypto markets — no clients, no investor reports.\n\nOwn the platform our trading systems run on: Linux, AWS, our own on-prem infrastructure, networking, databases, deploys and observability.\n\nYou'd be the first person fully dedicated to infrastructure — but you're not starting from zero or alone. The engineer who built most of it is still here and will hand it over deliberately.\n\nMarkets run 24/7. There's no maintenance window, and production means live trading with real capital.\n\nEnd-to-end ownership. You get problems and context, not a queue of infrastructure tickets.\n\nTo apply: send us a few paragraphs about an incident you handled or a system you improved. No CV or cover letter required.\n\nWe build software that trades real capital in live crypto markets. Latency, reliability and infrastructure decisions have a measurable impact on PnL. Engineering isn't supporting the business here — it is the business.\n\nWe're a proprietary trading firm based in Brno. We run market making on Binance with our own capital and we're preparing to expand to additional exchanges. No clients. No investor reports. When the system performs well, we make more money. When it doesn't, we lose our own. That creates a very different engineering environment from most software companies.\nOur developers build and run their own services, and that isn't changing. What we're missing is someone who owns the platform underneath them — and makes \"run what you build\" something developers can do well rather than something they improvise.\nThe infrastructure works. It was also built alongside trading systems, mostly by people whose main job was something else. We're now at the point where it deserves someone whose full attention it is.\nWhy people enjoy working here\nReal impact. Infrastructure isn't a cost centre. Reliability and latency directly affect our trading results.\n\nSmall team. Developers, researchers and traders work side by side. There are no organisational walls.\n\nOwnership. You own the platform, not a queue of Jira tickets.\n\nFast execution. Good ideas can become production changes within days.\n\nPragmatism. We care about solutions that work, not infrastructure fashion or unnecessary process.\n\nLearning. We openly share knowledge, debate ideas and learn from one another.\n\nPurpose. Through our Zero+ foundation we support projects with positive social impact.\n\nWhat you'd actually be running\nCloudAWS across two regions — Tokyo close to the exchange for latency, Dublin for internal toolingIaCTerragrunt + OpenTofu, in-house module library, remote state with lockingConfigAnsible — roles covering ~15 host types, from trading engines to database nodesCI/CDSelf-hosted GitLab, tag-driven build → registry → deploy pipelines, autoscaled spot runners, custom builder imagesDataTimescaleDB with Patroni HA behind health-checked HAProxy, plus SQL ServerObservabilityPrometheus, Loki and Grafana, plus some home-grown alerting that needs consolidationNetworkWireGuard, pfSense driven by API, split-horizon DNS between cloud and on-premOn-premOur own infrastructure running Proxmox, Git and core databasesWorkloadsLow-latency .NET services consuming real-time exchange data\nNo Kubernetes. We run containers directly on hosts with host networking. That's deliberate: extra layers aren't free when you're measuring latency in microseconds.\nIf your main ambition is to build a Kubernetes platform, this probably isn't the job for you.\nWhat you'll do\nOwn the platform end to end. Linux, AWS, on-prem, networking, deployment, secrets and access. Infrastructure should be reproducible and understandable — not a collection of machines somebody configured once and hopes nobody reboots.\nMake deployments safe in a live market. There's no maintenance window. Production systems are trading real capital while releases happen. One of the early opportunities is improving how releases are versioned, deployed, verified and rolled back so we always know exactly what's running and can confidently return to the previous state.\nBuild observability that settles arguments. When latency spikes, we want to know quickly whether it was us, the network or the exchange. Structured logging, meaningful metrics, latency histograms and disciplined clock synchronisation should make that answerable in minutes rather than hours.\nRun the data layer. PostgreSQL and TimescaleDB handle continuous market-data workloads. You'll own replication, Patroni failover, retention and compression policies, performance and backups that have actually been tested by restoring them.\nOwn networking that matters commercially. Connectivity and routes to exchange endpoints, IP whitelisting, remote access and failover paths. Latency here isn't an abstract infrastructure metric — it can be the difference between a good fill and a missed opportunity.\nImprove the internal platform. Access and identity across our systems is automated from Google Workspace by a Python service provisioning Git, monitoring, VPN and internal tooling. You'll extend it and help us simplify and de-risk identity management.\nHandle incidents — and make the next one smaller. Occasionally something exceptional happens outside normal office hours. You'll help resolve it, understand why it happened and improve the system so the same incident doesn't happen twice.\nWork directly with developers, researchers and traders. You get a problem and context, not a written-up ticket.\nWhat ownership actually means here\nWe say ownership because it's the main thing we're offering.\nYou get problems, not specifications. We expect engineering judgement rather than following predefined designs.\n\nYou own the platform, not tasks. Larger architectural decisions are made together with our CTO; how the platform is built, operated and improved day to day is yours.\n\nThere are no handoffs. Developers continue to own their services; you own the platform they run on. You're partners, not separate teams throwing tickets over a wall.\n\nYour results are visible immediately. Reliability, deployment speed and latency settle arguments much faster than presentations ever could.\n\nOur CTO is hands-on and knows the current infrastructure because he helped build it. You'll have someone to challenge ideas with and learn the existing system from, without having someone managing you at arm's length.\nOwnership also means freedom comes with responsibility. Nobody micromanages you, but nobody automatically picks things up if you drop them either. This role suits people who'd rather be trusted than managed.\nWhat you should have\nDeep Linux knowledge. You can work out what a process or machine is actually doing when something goes wrong and know which tools will give you the answer.\n\nInfrastructure as code and containers. Terraform/OpenTofu, Ansible, Docker or close equivalents. You value reproducibility over cleverness.\n\nReal networking knowledge. TCP behaviour, routing, MTU, VPNs, firewalls and DNS. Enough to debug a problem that exists somewhere between two machines — including reaching for a packet capture when necessary.\n\nObservability as a discipline. You know what to measure, how to make it useful and what noisy telemetry to delete.\n\nPostgreSQL operations. Replication, failover, backup and restore, and performance under load.\n\nCI/CD you've owned, not just consumed. You've built pipelines and been responsible for what happens when a release goes wrong.\n\nUseful scripting. Python or Bash written well enough that someone else can safely depend on it, including integrations with APIs.\n\nEnd-to-end ownership. You take a problem, decide how to solve it, build it, ship it and keep it running.\n\nDiligence and discretion. You'll be working close to trading systems and real capital.\n\nWillingness to be occasionally on call when an exceptional incident needs a fast response.\n\nBonus points\nTimescaleDB or experience operating time-series data at volume.\n\nPatroni or other PostgreSQL HA setups.\n\nKernel and network latency tuning — NIC queues, interrupt affinity, sysctl, NTP/PTP/chrony.\n\nOperating self-hosted GitLab rather than simply using it.\n\nBare metal and hardware — procurement, racking and capacity planning.\n\nExchange connectivity or another environment where network latency carries a commercial cost.\n\nSecurity around sensitive systems — secrets management, least-privilege IAM, access control and auditing.\n\nReading C#/.NET well enough to understand what the services you're operating are actually doing.\n\nYou don't need to know trading. Most of us didn't. What you do need is curiosity — you can't run a system well if you don't understand its commercial purpose.\nWhat we won't promise you\nYou won't inherit a perfectly tidy platform.\nSome parts are well designed and mature. Others were built quickly by developers while their main focus was keeping trading systems moving. Documentation isn't complete, and your first months will involve reading, asking questions and deciding what should be improved — and what should simply be left alone.\nYou will get a real handover. The engineer who built most of the current infrastructure is still here, and transferring ownership deliberately is one of the main reasons this role exists. You're not being dropped into an undocumented system and wished good luck.\nOccasionally you'll investigate production incidents outside office hours because crypto markets never sleep. It's not frequent, but it's part of operating systems that trade real capital.\nIf you're looking for a mature infrastructure organisation with established teams and narrowly defined responsibilities, this isn't it. If you'd rather take a working platform, understand it deeply and make it genuinely yours, it probably is.\nWho usually thrives here\nWe're looking for people who naturally take ownership, enjoy understanding how complex systems work and would rather solve difficult problems than follow detailed instructions.\nYou don't need a particular infrastructure ideology. In fact, we'd prefer you didn't have one. We care about understanding the trade-offs, measuring what matters and choosing the simplest solution that works.\nIf you're curious, pragmatic and motivated by building infrastructure with measurable impact, you'll probably enjoy working here.\nTerms\n100 000–180 000 CZK per month\n\nContract\n\nBrno, hybrid (3 days in the office)\n\nHow to apply\nNo cover letter.\nInstead, write us a few paragraphs about a system you ran or an incident you handled — what broke, how you found it and what you changed so it wouldn't happen again.\nThat tells us far more than a CV.","description_format":"text","description_chars":10608,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto"],"lifecycle":[{"event":"open","at":"2026-11-09T20:41:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["seen:0","win:early"],"computed_at":"2026-11-09T22:04:24Z"},"pay":null,"html_url":"https://alion.io/job/koton-devops-infrastructure-engineer-trading-systems","json_url":"https://alion.io/job/koton-devops-infrastructure-engineer-trading-systems.json","meta":{"generated_at":"2026-11-09T22:04:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11205,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2755669},"rest":"https://alion.io/mcp/rest/get_company?id=2755669"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkoton-devops-infrastructure-engineer-trading-systems"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkoton-devops-infrastructure-engineer-trading-systems"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkoton-devops-infrastructure-engineer-trading-systems"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/koton-devops-infrastructure-engineer-trading-systems\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkoton-devops-infrastructure-engineer-trading-systems"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3983380}},{"tool":"search_jobs","arguments":{"company":"koton.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3983380},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}