WireGuard + Linux Networking Engineer

WireGuard + Linux Networking Engineer

Production VPN Backend Automation

About the Project

We are building a production consumer VPN product (macOS + iOS clients) using:

Ruby on Rails API backend

Ubuntu VPS servers (multi-region)

WireGuard tunnel layer

Stripe subscription system

Core backend systems are already implemented (device model, region model, config generation).

We are now hardening infrastructure for beta launch within 6 weeks.

This is a Linux networking and WireGuard automation role — not a general backend position.

Scope of Work

Peer Lifecycle Automation

Add/remove peers automatically

Prevent duplicate IP allocation

Deterministic IP assignment

Idempotent config generation

Safe live server updates (no user disruption)

Concurrency protection

Multi-Region Validation

Clean region abstraction

Correct endpoint + public key mapping

Confirm scaling from 2–3 regions to ~15–20

Production Hardening

Logging & observability

Defensive error handling

Locking strategy

Clear documentation

Required Experience

Production WireGuard deployments

Automated peer provisioning

Strong Linux networking (routing, firewall, subnets)

Experience modifying live WireGuard configs safely

IP allocation strategy for multi-user systems

When Applying

Please briefly answer:

Have you automated WireGuard peer provisioning before?

How would you update a live WireGuard server safely?

How would you prevent IP conflicts?

Have you worked on a VPN or network infrastructure product?

Engagement Details

Fixed-price milestones preferred

Estimated 40–70 hours

Target budget:

$2,000–$3,000 CAD

3–4 week timeline

Documentation required

We are preparing for production beta launch — not experimentation.

Contract duration of 1 to 3 months.

Mandatory skills:

WireGuard, Linux System Administration, Network Security, VPN, Infrastructure as Code, DevOps Engineering, Ubuntu, Terraform, Bash, Linux