Senior Linux SysAdmin (VPN)

Behind every secure connection is infrastructure that needs to perform at scale. That’s where this team comes in. We’re looking for an Infrastructure Engineer to help operate and improve the systems powering Surfshark’s services worldwide. You’ll join a team of Systems Administrators, Network Engineers, Monitoring Experts, Infrastructure Analysts, Cloud Specialists, and Security Supervisors who thrive on solving tough problems, sharing knowledge, and continuously improving the way things work.

If you want to:

• Own and operate VPN services, RADIUS authentication, and DNS infrastructure across thousands of Linux servers globally;
• Manage Linux networking, routing, traffic engineering, and anti-DDoS controls at scale;
• Lead incident response - define escalation criteria, drive root cause analysis, and own post-mortems for significant failures;
• Identify recurring issues and translate operational pain points into platform improvements and SLO contributions;
• Coordinate CVE remediation and redeploy decisions across the fleet; build automation and operational documentation.

And you can check off:

• Deep Linux systems and networking knowledge - routing, BGP, filtering, DNS, kernel-level debugging;
• Solid understanding of RADIUS authentication and accounting mechanisms;
• Experience operating critical infrastructure at scale with high availability requirements;
• Proven ability to lead incident response and post-mortem processes;
• Ability to write automation and operational tooling in Go, Python, or similar — including AI-assisted workflows;
• Familiarity with Ansible/IaC, monitoring stacks (Prometheus, VictoriaMetrics), VPN protocols (WireGuard, OpenVPN, IPsec), or XDP/eBPF is an advantage.

Bonus points if you:

• Have Experience mentoring engineers or providing technical leadership within a team.

• Deep Linux systems and networking knowledge - routing, BGP, filtering, DNS, kernel-level debugging
• Solid understanding of RADIUS authentication and accounting mechanisms
• Experience operating critical infrastructure at scale with high availability requirements
• Proven ability to lead incident response and post-mortem processes
• Ability to write automation and operational tooling in Go, Python, or similar — including AI-assisted workflows

Nice to have

• Familiarity with Ansible/IaC, monitoring stacks (Prometheus, VictoriaMetrics), VPN protocols (WireGuard, OpenVPN, IPsec), or XDP/eBPF is an advantage
• Have Experience mentoring engineers or providing technical leadership within a team

• Growth and learning opportunities: time dedicated to learning, conferences, online learning platforms, and books for your professional development
• Health and wellness: we want you to feel and be your best. That's why we offer various benefits, from online workouts, a physical coach and a gym to regular mental health checks
• Tools of your choice: choose technical equipment and the tools you need to do your best
• Community and celebrations: get ready for long-lasting traditions such as yearly workation, Friday get-togethers, various team buildings and company celebrations
• Convenient commuting: traveling from point A to point B can be a pain. That’s why, depending on your unique circumstances, we compensate part of your public transport costs
• Work-life balance: We encourage working in the office, with the possibility of up to two remote days per week. Plus, with our WFA policy, you can work from almost anywhere in the world
• Premium Surfshark accounts: for you, your family, and friends
• Gross salary: 3000-6300 Eur/month for the Lithuanian market, 18300-27300 Pln/month for the Polish market. It may vary depending on your skills and experience.