0G is hiring its first dedicated DevOps engineer to own our cloud platform end to end: infrastructure, deployments, networking, security hygiene and cost. Today that work is spread across several developers.
Our platform runs on five providers: Google Cloud, Alibaba Cloud, AWS, Cloudflare and Vercel. It includes:
Validator, seed, RPC, and archive nodes for our mainnet and testnet
Confidential-computing (TEE) workloads, GPU machines and storage nodes
Kubernetes clusters and managed databases
A global RPC load balancer at the edge, and our web apps
All together, that is more than 200 virtual machines. You will be the person who knows what runs where, why it runs there, and what it costs.
What you'll ownYou own the platform, from the network edge to the bill.
Cloud operations: provisioning, upgrades, capacity and the full resource lifecycle on Google Cloud, Alibaba Cloud and AWS. That includes rightsizing and releasing what nobody uses.
Kubernetes: run, upgrade and scale our clusters. Keep them on supported versions and design node pools, autoscaling and Spot capacity.
Blockchain node fleet: operate validator, sentry, seed, RPC and archive nodes, including peering topology, snapshots, sync and client upgrades.
Networking and edge: VPC design, load balancers, DNS, Cloudflare Workers, Tunnels and WAF, and keeping internet egress deliberate and cheap.
Infrastructure as code and CI/CD: every environment defined in Terraform or Pulumi. You design and run CI/CD on Jenkins or an equivalent such as GitHub Actions or GitLab CI, covering builds, tests, security scans and releases from commit to production, with no manual steps.
Observability and on-call: metrics, logs, alerts and dashboards, including control of metric cardinality. You also run incident response and write the postmortems.
Security and access: least-privilege IAM across every provider, secrets management, and no databases or admin ports open to the internet.
Cost management: billing exports, budgets and alerts, tagging, a monthly cost review and commitment planning.
Developer enablement: templates, preview environments, documentation and support for the engineers who ship on the platform.
Kubernetes: GKE, EKS, Helm, Ingress and Gateway API, autoscaling, RBAC, network policies
Networking: TCP/IP, subnets and CIDR, routing, NAT, L4 and L7 load balancers, DNS, TLS, firewalls, VPC peering
Google Cloud: Compute Engine, GKE, Cloud SQL, Cloud Run, IAM, Cloud Monitoring, billing export to BigQuery
Infrastructure as code: Terraform, Pulumi
CI/CD and containers: Jenkins or an equivalent (GitHub Actions, GitLab CI), Argo CD, Docker and BuildKit, container registries
Observability: Prometheus, Grafana, Cloud Monitoring, CloudWatch, Alibaba CloudMonitor
Linux: Systems administration, systemd, disks and filesystems, performance debugging
Alibaba Cloud: ECS, VPC, NLB and ALB, ESSD disks, RDS, PolarDB, SAE, Cloud Firewall
AWS: EC2, EKS, RDS, ALB and NLB, Route 53, S3, Organizations
Cloudflare: DNS, Workers, Tunnels, WAF and rate limiting, Zero Trust
Databases (operations): PostgreSQL, MySQL, MongoDB, managed Kafka
Blockchain nodes: CometBFT-based chains, reth and other EVM clients, P2P networking
Vercel: Projects, builds, ISR, team access
…