Wikimedia's Traffic Security Engineer Job Description.pdf

We are seeking an Operations Engineer to join our Technical Operations team, responsible for the reliability and performance of a global top-10 website, Wikipedia. The Traffic Security position focuses on Security and Privacy responsibilities, including technical stewardship of our TLS termination for users at the edges of our network. Key responsibilities include:

Protecting users' reading and editing habits from mass surveillance
Keeping TLS infrastructure up to date in the face of evolving threats
Analyzing and optimizing edge software infrastructure to enhance users' experiences
Assessing and deploying newer protocols, technologies, and software
Reactively responding to and proactively engineering against DDoS and other attacks
Analyzing and advising on application-layer security issues exposed over HTTPS

Required experience includes:
A deep understanding of TLS, HTTP[S], TCP/IP, DNS, and other related protocols
Hands-on experience with TLS libraries and HTTP server software configuration
A working knowledge of modern cryptography from a systems engineering point of view
Experience working on general infrastructure and application-layer security issues
Experience with Open Source operations tooling for configuration management, orchestration, and monitoring

Preferred experience includes:
Operating TLS-terminating reverse proxy servers at global scale
Operating large web properties at a global scale
Programming experience writing and/or modifying network daemons and/or libraries in languages such as C, C++, Go, Python, and/or Rust
Knowledge of Linux IPVS load-balancing, global IP routing, and HTIP caching and related CON technologies.