DevOps / Network Engineer

Who you are

• You are passionate about giving people private, secure, and unrestricted access to the internet. You care about your users and the trust they place in the service
• You have strong hands-on experience with networking and cloud infrastructure and enjoy understanding how systems work end to end
• You have experience operating production networking infrastructure, ideally including VPN or proxy infrastructure at scale
• You enjoy inheriting an existing environment, documenting how it actually works, and systematically replacing manual runbooks with code and automation
• You embrace agentic AI as a force multiplier: you actively use AI coding and agentic tools to accelerate infrastructure development, investigation, documentation, and operational automation, while applying appropriate review and verification before changes reach production
• You value working closely with Product and Engineering, learning what reliability and speed mean to users, and delivering infrastructure that they can depend on
• You think about infrastructure as part of the product's economics: uptime, latency, connection success rate, capacity, and cost per active user all matter
• You’re excited to deliver well-tested, version-controlled infrastructure changes in 2-week sprints, and you find minimal ways to test hypotheses and validate feasibility
• You’re a strong advocate for CI/CD, infrastructure as code, and continuous, safe deployments with rollback paths
• You are security-minded: secrets management, encryption at rest and in transit, least-privilege access, key handling, and compliance (GDPR, CCPA, SOC 2) are part of how you work every day
• 5+ years of professional DevOps, SRE, or network engineering experience running production infrastructure in an agile environment, with hands-on experience using:
• AWS (EC2, Lambda, S3, RDS/PostgreSQL, Route 53, IAM, VPC, CloudWatch) plus at least one additional provider such as DigitalOcean, Vultr, Hetzner, or Linode
• Infrastructure as Code and configuration management: Terraform and Ansible
• Docker and container orchestration or fleet management for many small nodes across providers
• Linux system administration and networking: iptables/nftables, WireGuard, routing, NAT, DNS, TLS/certificates, and traffic shaping
• Observability and alerting: Datadog (or Prometheus/Grafana), Cloudflare, log aggregation, on-call and incident response
• CI/CD: GitHub Actions (or similar) with automated testing, deployment safety, and rollback
• Scripting and automation in Python, Go, or Bash
• VPN and domain expertise: Hands-on experience operating VPN, proxy, or networking infrastructure in production, with a strong understanding of server provisioning, configuration and key management, health monitoring, failover, and network performance. Experience with WireGuard, Shadowsocks, OpenVPN, or IKEv2/IPsec technologies at scale is strongly preferred
• Deep understanding of DNS and domain management, CDN/edge (Cloudflare), IP reputation, geo-distribution, and strategies for resilience against blocking and provider outages
• Security fundamentals: secrets management (Vault, AWS Secrets Manager, or SSM), encryption in transit and at rest, least-privilege IAM, vulnerability scanning, and hardening of public-facing servers
• Agentic AI proficiency: demonstrated day-to-day use of AI agents (e.g., Claude Code, Cursor, GitHub Copilot agents) to write and review infrastructure code, automate runbooks, and investigate incidents, with strong judgment on verifying AI-generated output before it touches production
• You are comfortable owning production operations, including troubleshooting incidents, participating in on-call (24/7) support, identifying root causes, and improving systems so that recurring operational problems become automated rather than manual
• You’re a candid and empathetic communicator that is excited to join a startup that enjoys leveling up a company
• You have exceptional organizational and analytical skills leading to confident independent delivery, but know when and how to include others
• You have experience operating production systems at a meaningful scale, with strong ownership and problem-solving skills
• Passionate about Technology and keeping up to date with latest advancements, techniques and best practices
• Alignment with our Core Values:
• ​​Accountable: You take ownership of your responsibilities, demonstrating trustworthiness and self-discipline. You are consistent in your work, transparent in your actions, and communicate effectively. You follow through on commitments and strive for continuous improvement
• Action-driven: Identify what is most important, agree on scope, timely execute, and drive the greatest impact. You take initiative, roll up your sleeves, and get things done
• Caring: You genuinely care about yourself and others, our business and craft, our mission and vision, and are passionate in heart and mind. You understand the importance of our team and strive to create a positive, supportive work environment
• Curious: You focus on the ‘why,’ learn and expand your knowledge, explore new ideas, and generally make things better. You're a lifelong learner with a thirst for knowledge and a constant desire to improve
• Thorough: Your work is thoughtful, impactful, timely, accurate, and complete. You pay attention to detail, are meticulous, and ensure quality work and compliance
• Experience with censorship-circumvention technologies and traffic obfuscation (Shadowsocks plugins, V2Ray/Xray, obfs4, domain fronting) and operating in restrictive network environments
• Experience with userspace network stacks (lwIP, gVisor netstack) or Go-based networking tooling (wireguard-go)
• (Strong Plus) Experience taking over or integrating infrastructure from another company, including unfamiliar cloud environments, accounts, vendors, monitoring, CI/CD, and operational processes
• Kubernetes, Nomad, or similar orchestration; Packer for image building
• Self-managed databases (MongoDB, PostgreSQL, Redis) and backup / disaster recovery design
• Cloud cost optimization across multiple providers and FinOps practices
• Compliance program experience (SOC 2, GDPR, CCPA) and handling of law-enforcement / data requests for a privacy product
• Familiarity with mobile app release pipelines (Fastlane, Bitrise, Xcode Cloud) and backend stacks in Go, Python, and Node.js

What the job involves

• Mode.Inc is looking for a DevOps / Network Engineer to help take ownership of the infrastructure behind our newly acquired VPN product
• You will work as part of a small engineering team responsible for operating, stabilizing, and evolving the product after acquisition, with the opportunity to support the infrastructure of additional acquired products over time
• You will run and evolve a globally distributed VPN network spanning multiple cloud and hosting providers, the AWS-based control plane and backend services that support it, and the infrastructure-as-code, monitoring, and deployment tooling that keeps it all healthy
• We are a user-facing product-led team, and we are looking for someone who is passionate about keeping a fast, private, and censorship-resistant service online for users around the world, often in regions where open internet access matters most
• As an engineer, you won't be building a greenfield platform
• You'll inherit a live production environment and be responsible for understanding how it works, identifying its biggest risks, and progressively making it more reliable, automated, secure, and cost-efficient
• You’ll turn “someone logs in and restarts it” into automation, build the CI/CD and observability foundations the team needs, and use agentic AI tools as a core part of your daily workflow
• You will work closely with the Engineering Manager and backend/mobile engineers, owning the infrastructure and networking domain while partnering with the broader team on product delivery and operational reliability
• First 30–60 days:
• Understand acquired VPN product network architecture and infrastructure
• Build a clear map of cloud/hosting providers, VPN nodes, control plane, dependencies and operational tooling
• Identify critical reliability, security and cost risks
• Close critical knowledge gaps from the acquired team
• Establish ownership and operational runbooks
• Assure 100% product uptime
• Within 90–180 days:
• Reduce manual operational work through automation
• Improve monitoring, alerting and incident response
• Establish reliable CI/CD and infrastructure-as-code practices where missing
• Improve VPN availability, connection success and operational efficiency
• Become the clear technical owner of the VPN infrastructure domain
• Uptime at world class market levels for similar products