What you'll work on
Set the technical direction for the systems team, growing and mentoring the group while staying hands-on in the work yourself.
Take ownership of a distributed on-prem edge fleet — in-store servers and camera hardware across many customer sites, connected back over secure VPN/mesh networking (OpenVPN, Tailscale).
Design self-service tooling, scripts, and internal APIs so customer support and field technicians can independently install and debug store hardware, networking, and cameras — cutting down on engineering escalations.
Run a self-hosted monitoring and observability stack (Prometheus-based: Grafana, Mimir, Loki, VMAgent, Vector) spanning edge and cloud, with SLO tracking and alerting feeding into automated ticketing and remediation.
Build automation — event-driven auto-remediation and ticketing via Ansible/AWX and serverless AWS components (SNS/SQS/Lambda) — so manual ops effort doesn't scale with the fleet.
Manage core infrastructure at the company's Taipei office — internal network, virtualization, Kubernetes, storage, device monitoring, and self-hosted internal services (registry, auth, reverse proxy).
Shape how systems investments support the product roadmap, working closely with ML engineers, product managers, customer success, and client-side IT teams.
Own the on-call rotation and incident response, turning recurring problems into permanent fixes and documented runbooks.
Handle security and compliance operations — ISO 27001 ISMS upkeep, vulnerability management, code scanning, and disaster recovery testing.
You're a strong fit if you have
Proven experience leading an infrastructure, platform, or SRE team while continuing to work hands-on yourself.
5+ years in systems, infrastructure, or DevOps engineering, with solid Linux (Ubuntu) administration and real experience running large fleets in production.
Comfortable with core networking concepts — TCP/IP, DNS, VLANs, VPNs, firewalls.
Strong background in infrastructure-as-code and config management across on-prem and cloud (Terraform, Pulumi, or similar).
Confidence running observability at scale — metrics, logging, alerting, SLO definition — and making sensible tradeoffs between monitoring depth and cost.
Strong scripting/automation instincts, mainly Bash and Python, Go a plus — someone who automates away repetitive manual work.
Strong communicator — clear documentation and runbooks, calm under incident pressure, good cross-team coordination.
Fluent in Mandarin and English (Mandarin for internal team communication; English for daily work with US-based stakeholders and vendors).
A practical, priority-driven approach to ownership — balancing reliability work against delivery speed.
Bonus points: experience with IP cameras/NVRs, ONVIF, and real-time video streaming (RTSP, H.264/H.265, MediaMTX); storage/NAS operations at scale (ZFS/TrueNAS, Synology, QNAP, RAID/HA); vulnerability scanning and static analysis tools (OpenVAS, SonarQube); low-code workflow automation (e.g. n8n) and a history of building low-toil operational systems.
