Middle DevOps / SysOps Engineer

About the role

We're looking for a middle DevOps / SysOps engineer to take care of the infrastructure our product runs on: on-prem virtualization, network and VPN connectivity between sites, and the delivery pipelines on top of it. The team is small, so you get real ownership from the start — and room to grow into your own areas of responsibility.

Responsibilities

• Operate and develop on-prem virtualization: VMware ESXi + vCenter (clusters, resource pools, storage, patching and version upgrades)
• Administer network infrastructure: MikroTik, Cisco, pfSense — VLANs, routing, NAT, firewall policies
• Build and maintain WireGuard site-to-site and client VPN topologies between offices, labs and cloud
• Maintain Ubuntu servers: systemd, journald, configuration management, hardening, monitoring and alerting
• Support Docker-based build and deployment workflows
• Develop and maintain CI/CD pipelines in GitHub Actions
• Manage S3-compatible object storage for backups and build artifacts
• Own backup and restore procedures, including regular recovery testing
• Write technical documentation and runbooks for what you build
• Participate in incident response and on-call rotation

Requirements

• 2+ years of commercial experience in DevOps / system administration / infrastructure
• Production experience with VMware ESXi and vCenter
• Hands-on experience with at least two of: MikroTik RouterOS, Cisco, pfSense / OPNsense
• Networking fundamentals: L2/L3, VLAN, static and dynamic routing, NAT, firewall policies, DNS, DHCP, TLS, SSH
• WireGuard (or IPsec / OpenVPN): configuring tunnels and routing between sites, troubleshooting asymmetric routing
• Docker and Docker Compose: builds, registries, networking, volumes
• CI/CD with GitHub Actions (or GitLab CI with readiness to move to GHA)
• Linux (Ubuntu): confident CLI, systemd, journald, bash scripting
• Basic experience with S3-compatible storage or a public cloud provider (AWS / Azure / GCP / Hetzner)
• Monitoring and logging basics: Zabbix, Prometheus + Grafana, or ELK
• English for technical communication (reading docs, written async communication)

Nice to have

• Cisco FTD / FMC, Cisco ISE (802.1X, NAC, posture)
• Certifications: VCP-DCV, CCNA / CCNP Security, MTCNA / MTCRE / MTCINE, LFCS / RHCSA, AWS SAA
• Other VMware products: vSAN, NSX, Horizon (VDI), VCF, Site Recovery Manager, Veeam Backup & Replication
• Automation and IaC: Ansible, Terraform, Python
• Information security fundamentals: PKI, secrets management, hardening baselines (CIS), secure boot
• Bare-metal / Raspberry Pi / embedded Linux
• Experience with isolated or air-gapped environments

What we offer

• Competitive salary
• Reservation from mobilization
• Office in Kyiv with shelter access, generator and Starlink
• Possibility of hybrid work format
• Impact on improving our country's defense capabilities
• 21 days of vacation + public holidays, sick leaves