What we're building

BlancVPN moves the traffic of hundreds of thousands of people who trust us to keep it private and safe. Behind that sits a large, geographically distributed network — and it needs a senior engineer who can defend it, route it, and evolve it. We're looking for a Network Engineer | Senior to own traffic security and the network backbone: DPI, BGP, IPv6, and the security posture that keeps users protected end to end.

This is a hands-on role for a deep networking specialist who's as comfortable filtering routes and reading BGP as they are hunting botnets and DDoS in live traffic.

What we're looking for

Networks and Security

• Fluent Russian and English (B2+)
• 5+ years in network engineering or operations
• Deep IP networking expertise beyond CCNA level, especially around IPv6
• Hands-on DPI experience: traffic interception, signature-based analysis, and tools such as Suricata, ntopng, and similar systems
• BGP configuration, troubleshooting, and route filtering
• Operational experience with BIRD, FRRouting, Cisco IOS, or Junos
• Understanding of RPKI, IRR, and RIPE/RIR resource management
• Experience with IP transit and peering relationships
• Experience operating production infrastructure at large traffic volumes
• Strong interest in network security and motivation to keep growing in that direction

Nice-to-have

• Background in telecom, CDN, streaming, or large cloud providers
• Experience with cross-border links and Internet exchange points (IXPs)
• Experience building geographically distributed networks
• Knowledge of VPN protocols such as WireGuard, OpenVPN, Xray, and Amnezia
• Scripting skills in Bash, Python, or Go

What you'll be doing

Traffic Security and DPI

• Protect traffic flowing through our VPN service: detect port scanning, malware activity, botnets, DDoS attacks, mining, and other prohibited behavior
• Implement and operate DPI solutions: signature-based traffic analysis with Suricata, ntopng, and similar tooling
• Audit and maintain firewalls: review rules, eliminate vulnerabilities, and keep configurations current

Infrastructure and Evolution

• Improve the internal network: audit logical topology, identify gaps, and define an IPv6 rollout strategy
• Design new approaches to securing and evolving the network infrastructure
• Join a 24-hour on-call rotation with three days off between shifts

What we offer

• 🌍 Work from anywhere — fully remote (except Russia, Belarus, China, Syria, Iran, Yemen, North Korea, and some other regions).
• 🗓️ Flexible 5-day week — start when it suits you; loosely aligned to CET.
• 💻 Full home-office setup — all the equipment you need, on us.
• 🌴 40 flexible paid days off + paid sick leave.
• ❤️ Benefits — VHI, wellness, language courses, mental health support and a referral program.
• 📈 Room to grow — annual development budget + in-person team meet-ups.

Stages

• 👋 Welcome Call
• 🛠️ Technical Call
• 🤝 Pre-Offer Call