Remote Censorship-Resilient Network Engineer

CXM Direct LLC

Hong Kong

Remote

HKD 600,000 - 1,000,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

CXM Direct LLC is seeking a skilled network engineer to design, deploy, and maintain obfuscation layers ensuring access in regions with heavy censorship. You will implement traffic masking, IP rotation, and automated failover to keep services reachable.

Responsibilities include mitigating DPI and DNS manipulation, collaborating with backend teams, researching new circumvention methods, and building observability for tunnel health. Remote-friendly environment with flexible hours.

Qualifications

Strong Linux system administration and networking fundamentals.
Practical knowledge of proxy and tunneling technologies (Shadowsocks, V2Ray, obfs4proxy, WireGuard).
Practical knowledge of censorship mechanisms (deep packet inspection, DNS manipulation, IP/port blocking).
Solid scripting skills (Bash, Python, or similar).

Responsibilities

Design, deploy, and maintain proxy/obfuscation stacks (Shadowsocks, obfs4proxy, Cloudflare Tunnel, etc.).
Monitor and mitigate censorship-related disruptions (DPI, DNS poisoning, TCP reset injection, etc.).
Develop a strategy for traffic masking and IP hopping with Chocolate protocols.
Collaborate with the backend team to ensure seamless application connectivity under censorship pressure.
Research and adopt new circumvention techniques (TLS camo, domain fronting, randomized transports).
Implement observability & logging for health checks, traffic anomalies, and tunnel stability.