Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 124 days ago

Senior Systems Engineer - Email Deliverability & Infrastructure

Workable (global search)107,990 open roles

Where
Palermo, Buenos Aires, Argentina
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Systems Engineer - Email Deliverability & InfrastructureWorkable (global search) · Palermo, Buenos Aires, Argentina

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 6 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 124 days ago

Workable (global search) median: 6 days open

The posting

  • Location: Fully Remote (Global)
  • Compensation: $24k to $36k USD Yearly
  • Position Type: Full-Time Contract

Role Overview

We are seeking a highly technical, impact-driven Senior Systems Engineer to own, scale, and protect our core email transmission infrastructure. In this role, your golden rule will be Reputation Above All. You are not just managing email lists or monitoring dashboards; you will architect and maintain the high-availability server infrastructure, Mail Transfer Agents (MTAs), and automated defensive systems that ensure our legitimate traffic hits the inbox while bad actors are ruthlessly contained.

The ideal candidate bridges the gap between deep Linux systems administration, network engineering, and advanced email deliverability strategy. You will have a massive impact on the company by safeguarding our global IP/domain reputation, minimizing blast radiuses, and ensuring zero-downtime mail operations across our entire infrastructure network.

Core Responsibilities

1. Infrastructure Management & High Availability

  • MTA Optimization: Maintain and configure core MTAs (Postfix, Postal) and IMAP/POP3 servers (Dovecot), ensuring graceful reloads over restarts to prevent dropping active connections.
  • Traffic Routing & Load Balancing: Utilize HAProxy and network routing protocols (like BGP via FRRouting) to distribute outbound traffic and architect high-volume failover mechanisms.
  • Redundancy & Failover: Administer backend infrastructure databases (PostgreSQL replica setups) and maintain dedicated "Block" backup/archive servers to instantly take over the workload of a failed primary "Cube" server.
  • Architectural Segregation: Maintain strict workload isolation across our infrastructure network—separating standard nodes for mail stacks, specialized injection nodes (Postal), and separate archiving/backup systems to prevent high-volume senders from degrading performance.

2. Deliverability Engine & Authentication Protocol Architecture

  • Protocol Enforcement: Act as the absolute technical authority on DNS and authentication setups, maintaining flawless configurations for SPF (navigating the 10-lookup limit), DKIM (key rotation and forwarding protection), DMARC (safely driving policies toward p=reject), and BIMI.
  • Traffic Throttling: Implement automated, MTA-level dynamic throttling to handle 4xx deferrals instantly, preventing a single high-volume sender from triggering global rate limits across our shared IP pools.
  • Warm-up Strategy: Design and guide automated IP/Domain Warm-up Plans for new infrastructure, managing incremental volume scaling over 2–4 week cycles.

3. Edge Security, Anti-Abuse & Incident Response

  • Outbound Spam Filtering: Configure and optimize Rspamd to actively scan, flag, and quarantine highly spammy content before it exits our network.
  • Edge Defense: Deploy automated connection-dropping systems (Fail2Ban, custom SMTP blocker scripts) to mitigate authenticated attacks, brute-force attempts, and malicious traffic.
  • Blast Radius Mitigation: Program and maintain a dynamic IP pooling engine ("The Penalty Box") to instantly isolate accounts displaying poor metrics (bounces, FBL spikes) away from prime Tier-1 IP pools.
  • Blocklist Remediation: Act as the primary responder to major DNSBL (e.g., Spamhaus) listings. Leverage log analysis to locate the root cause account, plug the security leak, and submit expert delisting requests.

4. Observability & Monitoring

  • Log Shipping Architecture: Build and manage high-performance log aggregation pipelines using Vector to ship system and MTA data into a centralized repository for real-time auditing and incident response.
  • Network Auditing: Utilize IPAudit and custom tools to continuously scan for bandwidth anomalies, connection spikes, or compromised user credentials.
  • Dashboard Management: Actively monitor ISP infrastructure portals daily (Google Postmaster Tools, Microsoft SNDS, Yahoo Sender Hub) along with third-party tracking tools (GlockApps, Validity/ReturnPath, MXToolbox, DMARCian).

Requirements

Must-Have Technical Stack & Skills:

  • Systems Engineering Background: 5+ years of experience as a Linux Systems Administrator, DevOps, or Infrastructure Engineer with deep networking knowledge (TCP/IP, routing, ports, DNS management).
  • MTA Mastery: Expert-level proficiency configuring, debugging, and optimizing enterprise mail tools such as Postfix, Dovecot, or Postal.
  • Security & Filtering: Hands-on experience writing rules and maintaining mail-filtering/anti-abuse applications like Rspamd and Fail2Ban.
  • Observability Pipelines: Proven experience building or maintaining log pipelines using Vector or similar high-scale telemetry frameworks.
  • Infrastructure Automation: Experience implementing network routing layer tools (HAProxy, FRRouting) and relational databases (PostgreSQL replication).
  • Certificate Management: Strong familiarity with automated SSL/TLS certificate rotation and multi-node compliance monitoring to ensure broken TLS never causes silent drops.

Deliverability & Operational Standards:

  • Deep comprehension of the difference between Delivery (server handoff) and Deliverability (inbox placement).
  • Expert parsing of aggregate DMARC reports using platforms like DMARCian, Valimail, or Postmark.
  • Strict commitment to Acceptable Use Policies (AUP): zero tolerance for purchased/scraped lists and a firm grasp on Feedback Loop (FBL) automated triage.

Key Performance Indicators (KPIs)

Your success in this role will be directly measured by your ability to keep our infrastructure metrics pristine:

  • Global Infrastructure Spam Complaint Rate: Maintained strictly under 0.1%.
  • Global Hard Bounce Rate: Kept consistently below 2.0%.
  • Infrastructure Uptime: 99.99% availability across all outbound MTAs and mail relays.
  • Incident Isolation Time: Transitioning high-risk or abusive senders to the "Penalty Box" or circuit-breaking campaigns within minutes of a threshold breach.

Benefits

This is a highly technical systems engineering role, not a marketing or email campaign management position. To be considered, you must have hands-on experience configuring Linux mail servers at the command-line level. Please confirm upon applying that the compensation range of $24,000 to $36,000 USD per year aligns with your expectations.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.