Senior DevOps Engineer

0G is hiring its first dedicated DevOps engineer to own our cloud platform end to end: infrastructure, deployments, networking, security hygiene and cost. Today that work is spread across several developers.

Our platform runs on five providers: Google Cloud, Alibaba Cloud, AWS, Cloudflare and Vercel. It includes:

• Validator, seed, RPC, and archive nodes for our mainnet and testnet

• Confidential-computing (TEE) workloads, GPU machines and storage nodes

• Kubernetes clusters and managed databases

• A global RPC load balancer at the edge, and our web apps

All together, that is more than 200 virtual machines. You will be the person who knows what runs where, why it runs there, and what it costs.

You own the platform, from the network edge to the bill.

• Upgrading control planes and node pools with no downtime, and keeping clusters on supported versions.

• Scheduling: requests and limits, affinity, taints and tolerations, priority, and eviction under node pressure.

• Autoscaling with the HPA, cluster autoscaler or Karpenter, plus Spot or preemptible node pools for non-critical work.

• Networking inside the cluster: CNI, Services, Ingress or Gateway API, network policies, and DNS within the cluster.

• Security: RBAC, Pod Security, workload identity, and secrets that never sit in plain environment variables.

• Stateful workloads: StatefulSets, persistent volumes and CSI drivers, and backup and restore.

• Packaging and delivery with Helm or Kustomize, ideally through GitOps with Argo CD or Flux.

• Debugging a failing pod, node or rollout from events, logs and metrics.

• TCP/IP, subnetting and CIDR, routing, NAT, and the difference between L4 and L7 load balancing.

• DNS, TLS and certificates, firewalls and security groups.

• Private connectivity: VPC design, peering, private endpoints, and keeping internal traffic off public IPs.

• Troubleshooting with dig, curl, mtr and tcpdump, and understanding what internet egress costs.

• Running blockchain nodes in production, such as CometBFT validators and sentries, EVM archive or RPC nodes, and snapshot pipelines.

• Cloudflare Workers, Tunnels and Zero Trust at scale.

• Alibaba Cloud on the international site, including its billing and support model.

• Confidential computing (Intel TDX) and GPU workloads.

• CKA or CKS certification, a FinOps certification, or experience moving a team between CI systems, such as Jenkins to GitHub Actions.

• Go or Rust, enough to read and patch the services you operate.

• Production experience on at least two of Google Cloud, AWS and Alibaba Cloud, and willingness to learn the third quickly.

• Terraform or Pulumi in production, plus scripting in Bash and in Python or Go.

• A track record of cutting a cloud bill with data, through rightsizing, cleanup or commitments.

• A security-first habit with production credentials, and clear written communication.