Network Engineer | Senior

What we're building

BlancVPN moves the traffic of hundreds of thousands of people who trust us to keep it private and safe. Behind that sits a large, geographically distributed network — and it needs a senior engineer who can defend it, route it, and evolve it. We're looking for a Network Engineer | Senior to own traffic security and the network backbone: DPI, BGP, IPv6, and the security posture that keeps users protected end to end.

This is a hands-on role for a deep networking specialist who's as comfortable filtering routes and reading BGP as they are hunting botnets and DDoS in live traffic.

What we're looking for

Networks and Security

- Fluent Russian and English (B2+)
- 5+ years in network engineering or operations
- Deep IP networking expertise beyond CCNA level, especially around IPv6
- Hands-on DPI experience: traffic interception, signature-based analysis, and tools such as Suricata, ntopng, and similar systems
- BGP configuration, troubleshooting, and route filtering
- Operational experience with BIRD, FRRouting, Cisco IOS, or Junos
- Understanding of RPKI, IRR, and RIPE/RIR resource management
- Experience with IP transit and peering relationships
- Experience operating production infrastructure at large traffic volumes
- Strong interest in network security and motivation to keep growing in that direction

Nice-to-have

- Background in telecom, CDN, streaming, or large cloud providers
- Experience with cross-border links and Internet exchange points (IXPs)
- Experience building geographically distributed networks
- Knowledge of VPN protocols such as WireGuard, OpenVPN, Xray, and Amnezia
- Scripting skills in Bash, Python, or Go

What you'll be doing

Traffic Security and DPI

- Protect traffic flowing through our VPN service: detect port scanning, malware activity, botnets, DDoS attacks, mining, and other prohibited behavior
- Implement and operate DPI solutions: signature-based traffic analysis with Suricata, ntopng, and similar tooling
- Audit and maintain firewalls: review rules, eliminate vulnerabilities, and keep configurations current

Infrastructure and Evolution

- Improve the internal network: audit logical topology, identify gaps, and define an IPv6 rollout strategy
- Design new approaches to securing and evolving the network infrastructure
- Join a 24-hour on-call rotation with three days off between shifts

What we offer

🌍 Work from anywhere — fully remote (except Russia, Belarus, China, Syria, Iran, Yemen, North Korea, and some other regions).
🗓️ Flexible 5-day week — start when it suits you; loosely aligned to CET.
💻 Full home-office setup — all the equipment you need, on us.
🌴 40 flexible paid days off + paid sick leave.
❤️ Benefits — VHI, wellness, language courses, mental health support and a referral program.
📈 Room to grow — annual development budget + in-person team meet-ups.

Stages

👋 Welcome Call
🛠️ Technical Call
🤝 Pre-Offer Call