Network Engineer | Senior

What we're building BlancVPN moves the traffic of hundreds of thousands of people who trust us to keep it private and safe. Behind that sits a large, geographically distributed network — and it needs a senior engineer who can defend it, route it, and evolve it. We're looking for a Network Engineer | Senior to own traffic security and the network backbone: DPI, BGP, IPv6, and the security posture that keeps users protected end to end. This is a hands-on role for a deep networking specialist who's as comfortable filtering routes and reading BGP as they are hunting botnets and DDoS in live traffic. What we're looking for Networks and Security - Fluent Russian and English ( B2+ ) - 5+ years in network engineering or operations - Deep IP networking expertise beyond CCNA level, especially around IPv6 - Hands-on DPI experience: traffic interception, signature-based analysis, and tools such as Suricata, ntopng , and similar systems - BGP configuration, troubleshooting, and route filtering - Operational experience with BIRD, FRRouting, Cisco IOS, or Junos - Understanding of RPKI, IRR , and RIPE/RIR resource management - Experience with IP transit and peering relationships - Experience operating production infrastructure at large traffic volumes - Strong interest in network security and motivation to keep growing in that direction Nice-to-have - Background in telecom, CDN, streaming, or large cloud providers - Experience with cross-border links and Internet exchange points (IXPs) - Experience building geographically distributed networks - Knowledge of VPN protocols such as WireGuard, OpenVPN, Xray, and Amnezia - Scripting skills in Bash, Python, or Go What you'll be doing Traffic Security and DPI - Protect traffic flowing through our VPN service: detect port scanning, malware activity, botnets, DDoS attacks, mining, and other prohibited behavior - Implement and operate DPI solutions: signature-based traffic analysis with Suricata, ntopng, and similar tooling - Audit and maintain firewalls: review rules, eliminate vulnerabilities, and keep configurations current Infrastructure and Evolution - Improve the internal network: audit logical topology, identify gaps, and define an IPv6 rollout strategy - Design new approaches to securing and evolving the network infrastructure - Join a 24-hour on-call rotation with three days off between shifts What we offer 🌍 Work from anywhere — fully remote (except Russia, Belarus, China, Syria, Iran, Yemen, North Korea, and some other regions). 🗓️ Flexible 5-day week — start when it suits you; loosely aligned to CET . 💻 Full home-office setup — all the equipment you need, on us. 🌴 40 flexible paid days off + paid sick leave. ❤️ Benefits — VHI, wellness, language courses, mental health support and a referral program. 📈 Room to grow — annual development budget + in-person team meet-ups.   Stages 👋 Welcome Call 🛠️ Technical Call 🤝 Pre-Offer Call