Network Engineer

About the Role
We are building a resilient network stack to ensure our users can reliably access our services in regions with heavy censorship (e.g., Chinese, India). You will design, deploy, and maintain obfuscation layers (Shadowsocks, obfs4proxy, Cloudflare Tunnel) and implement strategies such as traffic masking, IP rotation, and automated failover to keep our infrastructure accessible.

Responsibilities

• Design, deploy, and maintain proxy/obfuscation stacks (Shadowsocks, obfs4proxy, Cloudflare Tunnel, etc.)
• Monitor and mitigate censorship-related disruptions (DPI, DNS poisoning, TCP reset injection, etc.)
• Develop a strategy for traffic masking and IP hopping with Chocolate protocols
• Collaborate with the backend team to ensure seamless application connectivity under censorship pressure
• Research and adopt new circumvention techniques (TLS camo, domain fronting, randomized transports)
• Implement observability & logging for health checks, traffic anomalies, and tunnel stability

Requirements

Must-Have Qualifications

• Strong Linux system administration and networking fundamentals
• Familiarity with proxy and tunneling technologies (Shadowsocks, V2Ray, obfs4proxy, WireGuard, etc.)
• Practical knowledge of censorship mechanisms (deep packet inspection, IP/port blocking, DNS manipulation)
• Solid scripting skills (Bash, Python, or similar)

Nice-to-Have Qualifications

• Knowledge of TLS fingerprinting evasion (uTLS, camouflage transports)
• Experience with Cloudflare Spectrum/Tunnel/Magic Transit or similar services
• Awareness of BGP security, RPKI, and route hijack prevention
• Security background in encrypted communications and adversarial networks
• Some Go or Rust experience (to tweak or build transport proxies if needed)
• Hands-on experience with containerization (Docker, ECS, or Kubernetes) and CI/CD automation (GitHub Actions, Terraform, Ansible, etc.)

Benefits

Why Join Us?

• Work on cutting-edge infrastructure to fight censorship and ensure open access
• Freedom to research, test, and implement creative networking solutions
• Remote-friendly team with flexible working hours
• Opportunity to make a real-world impact on internet freedom