Site Reliability Engineer (VPN Engineering)

Surfshark's VPN runs on thousands of servers worldwide, from the bare-metal infrastructure up, and the VPN Engineering team keeps every layer fast and dependable. We're looking for a Senior SRE to keep that global infrastructure resilient, secure, and high-performing at scale. You'll automate the deployment and management of a distributed fleet, sharpen observability and anomaly detection, and work shoulder to shoulder with software engineers on the backbone of an always-on service. This is a hands-on role for someone who treats reliability as an engineering discipline, not a fire drill, and enjoys large-scale automation, Linux networking, incident response, and performance tuning in complex production environments.

• Automate and scale the deployment of thousands of VPN servers across a global fleet, and design out single points of failure;
• Build reliable monitoring, logging, and anomaly detection that catches issues before they become incidents;
• Troubleshoot complex issues across Linux systems, networking, VPN protocols, and proxy layers;
• Reduce repetitive manual work with automation and internal tooling, from scripts to n8n workflows and Jira integrations;
• Partner with software engineers to optimize the infrastructure and improve tooling, CI/CD, and reliability processes;
• Lead incident response, postmortems, disaster recovery readiness, and long-term performance work.

And you can check off:

• Proven experience in SRE or similar roles, with real ownership of production-critical systems at scale;
• Strong Linux systems and networking knowledge, including DNS, VPNs, routing, firewalls, and proxies;
• Solid experience with Ansible and infrastructure automation in production, and scripting skills (Bash/Python) for operational automation;
• Experience with monitoring, logging, and troubleshooting performance and reliability issues at scale;
• Familiarity with GitLab CI/CD, incident management, disaster recovery, and secure infrastructure practices;
• Comfort using AI tools (Claude, Cursor, GitHub Copilot) to reduce manual work, and the judgment to check their output for security and performance.
• Have experience with bare-metal provisioning and network boot (iPXE/PXE), hardware lifecycle, and out-of-band management;
• Have coordinated with hosting or colo providers through remote-hands and provider APIs;
• Have operated other latency-sensitive, globally distributed services, or driven cross-team architecture decisions.

Here’s the deal:

• Growth and learning opportunities: time dedicated to learning, conferences, online learning platforms, and books for your professional development;
• Health and wellness: we want you to feel and be your best. That's why we offer various benefits, from online workouts, a physical coach and a gym to regular mental health checks;
• Tools of your choice: choose technical equipment and the tools you need to do your best;
• Community and celebrations: get ready for long-lasting traditions such as yearly workation, Friday get-togethers, various team buildings and company celebrations;
• Convenient commuting: traveling from point A to point B can be a pain. That’s why, depending on your unique circumstances, we compensate part of your public transport costs;
• Work-life balance: We encourage working in the office, with the possibility of up to two remote days per week. Plus, with our WFA policy, you can work from almost anywhere in the world;
• Premium Surfshark accounts: for you, your family, and friends;
• Gross salary: 4500 - 7400 Eur/month for the Lithuanian market, 20450 - 34000 Pln/month for the Polish market. It may vary depending on your skills and experience.