Middle DevOps / SysOps Engineer
About the role
We're looking for a middle DevOps / SysOps engineer to take care of the infrastructure our product runs on: on-prem virtualization, network and VPN connectivity between sites, and the delivery pipelines on top of it. The team is small, so you get real ownership from the start — and room to grow into your own areas of responsibility.
Responsibilities
* Operate and develop on-prem virtualization: VMware ESXi + vCenter (clusters, resource pools, storage, patching and version upgrades)
* Administer network infrastructure: MikroTik, Cisco, pfSense — VLANs, routing, NAT, firewall policies
* Build and maintain WireGuard site-to-site and client VPN topologies between offices, labs and cloud
* Maintain Ubuntu servers: systemd, journald, configuration management, hardening, monitoring and alerting
* Support Docker-based build and deployment workflows
* Develop and maintain CI/CD pipelines in GitHub Actions
* Manage S3-compatible object storage for backups and build artifacts
* Own backup and restore procedures, including regular recovery testing
* Write technical documentation and runbooks for what you build
* Participate in incident response and on-call rotation
Requirements
* 2+ years of commercial experience in DevOps / system administration / infrastructure
* Production experience with VMware ESXi and vCenter
* Hands-on experience with at least two of: MikroTik RouterOS, Cisco, pfSense / OPNsense
* Networking fundamentals: L2/L3, VLAN, static and dynamic routing, NAT, firewall policies, DNS, DHCP, TLS, SSH
* WireGuard (or IPsec / OpenVPN): configuring tunnels and routing between sites, troubleshooting asymmetric routing
* Docker and Docker Compose: builds, registries, networking, volumes
* CI/CD with GitHub Actions (or GitLab CI with readiness to move to GHA)
* Linux (Ubuntu): confident CLI, systemd, journald, bash scripting
* Basic experience with S3-compatible storage or a public cloud provider (AWS / Azure / GCP / Hetzner)
* Monitoring and logging basics: Zabbix, Prometheus + Grafana, or ELK
* English for technical communication (reading docs, written async communication)
Nice to have
* Cisco FTD / FMC, Cisco ISE (802.1X, NAC, posture)
* Certifications: VCP-DCV, CCNA / CCNP Security, MTCNA / MTCRE / MTCINE, LFCS / RHCSA, AWS SAA
* Other VMware products: vSAN, NSX, Horizon (VDI), VCF, Site Recovery Manager, Veeam Backup & Replication
* Automation and IaC: Ansible, Terraform, Python
* Information security fundamentals: PKI, secrets management, hardening baselines (CIS), secure boot
* Bare-metal / Raspberry Pi / embedded Linux
* Experience with isolated or air-gapped environments
What we offer
* Competitive salary
* Reservation from mobilization
* Office in Kyiv with shelter access, generator and Starlink
* Possibility of hybrid work format
* Impact on improving our country's defense capabilities
* 21 days of vacation + public holidays, sick leaves