Python + DevOps Engineer for Trading Infrastructure

Hiring: Python + DevOps Engineer for Trading Infrastructure Setup (IBKR / DigitalOcean)

Project Overview
This is an algorithmic trading infrastructure built for futures and FX markets using Interactive Brokers (IBKR).
The architecture is already fully documented — the new engineer will implement the initial network setup from scratch following a clear written plan (no guessing, no design work required).

The system uses multiple DigitalOcean droplets connected via secure HTTPS APIs:
a Global Hub (controller), Code servers (source of truth), and Execution nodes (strategy runners).
Each server includes local and global kill-switch endpoints for instant, network-wide trading shutdown.

Scope of Work
Set up and verify the entire Richstar droplet network as described in the provided setup document.

Tasks
- Deploy and configure droplets: Global Hub, Code-Test, Code-Live, and one Paper Execution node.
- Install and configure:
- IBKR Client Portal Gateway (headless, under systemd with auto-restart).
- Python trading bridge (FastAPI or Flask) with /health and /kill endpoints.
- Watchdog process for auto-restarts.
- Network and Security:
- Configure UFW firewall (SSH, HTTPS, app port only).
- Restrict /kill access to Global Hub.
- Enable fail2ban and set timezone to America/New_York.
- Verification:
- Confirm /kill/all cascade from Global Hub to all nodes.
- Validate /health responses and gateway connectivity.
- Ensure logging, rotation, and restart behavior.
- Deliverables:
- Fully operational test environment.
- Verified kill-switch propagation.
- Documented commands, ports, and service status.

Required Skills
- Python backend and Linux DevOps experience (FastAPI, Flask, systemd).
- Familiarity with Interactive Brokers API and Client Portal Gateway.
- Strong understanding of HTTPS microservices, firewalls, and secure server hardening.
- Experience with DigitalOcean or similar VPS environments.
- Comfortable working under temporary access and producing a clear handover.

Access and Workflow
- Developer receives temporary credentials for setup.
- Credentials are rotated immediately after validation.
- All changes must be documented for handover.

Timeline and Milestones
- Initial implementation and testing: 2 days
- Verification and handover documentation: within same week

Ideal Candidate
- Independent and reliable Python or DevOps engineer.
- Proven history with automated trading or brokerage API systems.
- Detail-oriented and security-conscious — treats infrastructure like production code.