About the Role
We are building a resilient network stack to ensure our users can reliably access our services in regions with heavy censorship (e.g., Chinese, India). You will design, deploy, and maintain obfuscation layers (Shadowsocks, obfs4proxy, Cloudflare Tunnel) and implement strategies such as traffic masking, IP rotation, and automated failover to keep our infrastructure accessible.
Responsibilities
- Design, deploy, and maintain proxy / obfuscation stacks (Shadowsocks, obfs4proxy, Cloudflare Tunnel, etc.)
- Monitor and mitigate censorship-related disruptions (DPI, DNS poisoning, TCP reset injection, etc.)
- Develop a strategy for traffic masking and IP hopping
- Collaborate with the backend team to ensure seamless application connectivity under censorship pressure
- Research and adopt new circumvention techniques (TLS camo, domain fronting, randomized transports)
- Implement observability & logging for health checks, traffic anomalies, and tunnel stability
Requirements
Must-Have Qualifications
Strong Linux system administration and networking fundamentalsFamiliarity with proxy and tunneling technologies (Shadowsocks, V2Ray, obfs4proxy, WireGuard, etc.)Practical knowledge of censorship mechanisms (deep packet inspection, IP / port blocking, DNS manipulation)Solid scripting skills (Bash, Python, or similar)Nice-to-Have Qualifications
Knowledge of TLS fingerprinting evasion (uTLS, camouflage transports)Experience with Cloudflare Spectrum / Tunnel / Magic Transit or similar servicesAwareness of BGP security, RPKI, and route hijack preventionSecurity background in encrypted communications and adversarial networksSome Go or Rust experience (to tweak or build transport proxies if needed)Hands-on experience with containerization (Docker, ECS, or Kubernetes) and CI / CD automation (GitHub Actions, Terraform, Ansible, etc.)Benefits
Why Join Us?
Work on cutting-edge infrastructure to fight censorship and ensure open accessFreedom to research, test, and implement creative networking solutionsRemote-friendly team with flexible working hoursOpportunity to make a real-world impact on internet freedom