VPN Systems Engineer for Gaming

Senior Network Engineer Needed for Custom Low-Latency WireGuard VPN and Real-Time Gaming Optimization Project Overview I am looking for a highly experienced Senior Network Engineer to design, build, test, and document a custom WireGuard VPN optimized for real-time online gaming, specifically Call of Duty: Mobile. This is not a basic VPN installation project. I need an engineer who can analyze the complete network path from my home connection in Sioux Falls, South Dakota, through my ASUS router and VPN server, to the actual game infrastructure. The main objective is to achieve the most stable and consistent connection possible by minimizing: * Packet loss * Jitter * Packet reordering * Bufferbloat * Route instability * Unnecessary encapsulation overhead * MTU and PMTU problems * UDP fragmentation * Latency spikes during combat * Local network congestion * Inconsistent routing between sessions The engineer must understand that a VPN cannot legitimately guarantee winning every engagement or eliminate every server-side networking issue. I am not looking for game manipulation, artificial packet loss, lag switching, traffic abuse, cheats, or any method that violates game rules. I am looking for measurable, legitimate network optimization. Current Environment My current setup includes: * Location: Sioux Falls, South Dakota, United States * Internet connection: approximately 2 Gbps fiber * Gaming device: iPad Pro M4 * Connection method: wired Ethernet through a USB-C Ethernet adapter * Router: ASUS RT-AX82U * Router firmware: official ASUS firmware * VPN client: ASUS VPN Fusion * VPN protocol: WireGuard * Current VPN server: Chicago VPS * Current WireGuard endpoint: hosted in Chicago * Current working tunnel MTU: 1280 * Game: Call of Duty: Mobile * Main traffic type: real-time UDP * Main concern: inconsistent hit registration, latency variation, desynchronization, and inconsistent close-range engagements The router currently uses Adaptive QoS, device prioritization, custom packet marking, DSCP classification, Ethernet tuning, and WireGuard-specific scripts. The engineer must audit these settings instead of blindly adding more commands. Required Technical Expertise The ideal engineer must have advanced, hands-on experience with the following areas. Linux Networking The engineer must be highly proficient with: * Linux routing * Kernel networking * IP forwarding * Policy-based routing * Multiple routing tables * Network namespaces * Connection tracking * NAT * UDP state handling * Reverse path filtering * Source-based routing * Linux network interfaces * Systemd networking * Persistent network configuration * Safe rollback procedures The engineer should be comfortable working with Ubuntu or Debian-based servers without relying entirely on graphical control panels. WireGuard The engineer must have expert-level knowledge of: * WireGuard server deployment * WireGuard client configuration * Key generation and management * PersistentKeepalive * AllowedIPs * Endpoint routing * Full-tunnel and split-tunnel configurations * WireGuard encapsulation overhead * Tunnel MTU selection * WireGuard interfaces on ASUS routers * ASUS VPN Fusion compatibility * NAT and forwarding for WireGuard clients * Multi-server WireGuard testing * Tunnel reconnection and monitoring * Handshake and transfer diagnostics The final configuration must be compatible with ASUS VPN Fusion and must provide a standard WireGuard configuration file. UDP and Real-Time Gaming Traffic The engineer must understand how real-time game traffic behaves, including: * Small and frequent UDP packets * Packet timing sensitivity * Jitter * Packet reordering * Burst traffic * Packet loss * Server-authoritative networking * Lag compensation * Interpolation * NAT behavior * Session stability * UDP queueing * Route asymmetry * Differences between ICMP testing and actual UDP game traffic The engineer must not rely only on speed tests or average ping. QoS and Queue Management The engineer must have strong knowledge of: * CAKE * FQ-CoDel * HTB * SFQ * Traffic classes * DSCP * Packet marking * iptables mangle table * nftables * tc * Ingress and egress shaping * Bufferbloat control * Device-based prioritization * Tunnel traffic classification * Correct placement of QoS before or after encryption * Avoiding duplicate or conflicting QoS systems The engineer must determine whether the current ASUS Adaptive QoS configuration helps or conflicts with custom rules. MTU and Path MTU Discovery The engineer must be able to diagnose: * MTU black holes * PMTU discovery failures * Fragmentation * ICMP filtering * WireGuard overhead * IPv4 and IPv6 MTU differences * UDP fragmentation * MSS clamping limitations * Tunnel-specific MTU behavior * Application failures caused by oversized packets The engineer must perform end-to-end MTU testing, not only ping the VPN endpoint. The final MTU recommendation must be based on real testing through the tunnel and during game sessions. Routing, Peering, and Network Path Analysis The engineer must understand: * BGP routing * Transit providers * Peering * Anycast * Route changes * Congestion between networks * VPS provider network quality * Looking Glass tools * ASN analysis * Forward and reverse path differences * Multi-homed providers * Route optimization * Regional game infrastructure * Differences between Chicago, Dallas, Ashburn, New York, and other locations The engineer must be able to compare direct internet routing against VPN routing and explain whether the VPN is actually improving the path. Diagnostic Tools The engineer must be proficient with: * tcpdump * Wireshark * tshark * mtr * traceroute * tracepath * ping * iperf3 * ss * ip * tc * ethtool * nft * iptables * conntrack * vnStat * iftop * nload * bmon * system logs * WireGuard diagnostics * packet capture filtering * timestamp analysis Experience with Paris traceroute, UDP-based path testing, and simultaneous packet captures on both sides of a tunnel is highly desirable. ASUS Router Experience The engineer should have experience with: * ASUS RT-AX series routers * ASUS VPN Fusion * ASUS Adaptive QoS * ASUS device prioritization * ASUS stock firmware * Asuswrt-Merlin or GNUton firmware * JFFS scripts * Firewall reconstruction * Cron jobs * Persistent router scripts * WireGuard client interfaces such as wgc interfaces * LAN bridge interfaces * Ethernet port diagnostics * Router CPU and memory limitations The engineer must not install third-party firmware without discussing the risks, compatibility, rollback procedure, and recovery plan first. Required Testing Methodology The engineer must perform a structured comparison that includes: 1. Direct internet connection without VPN 2. Current Chicago WireGuard VPN without custom rules 3. Current Chicago WireGuard VPN with optimized configuration 4. Any recommended alternative server or provider 5. Testing while the household network is idle 6. Testing while other devices are streaming or downloading 7. Testing during real Call of Duty: Mobile sessions 8. Testing during close-range combat or private matches 9. Testing over multiple sessions and different times of day The evaluation must include: * Minimum latency * Average latency * Maximum latency * Jitter * Packet loss * Packet reordering * Route changes * Tunnel stability * WireGuard handshake stability * Ethernet errors and drops * QoS drops and backlog * CPU utilization * NAT and conntrack behavior * MTU-related failures * Before-and-after results The engineer must avoid conclusions based on one successful match or one speed test. Expected Deliverables The final project should include: * A complete network audit * A diagram of the final network path * A clean WireGuard server configuration * A compatible ASUS VPN Fusion client profile * Secure firewall and NAT rules * Recommended MTU with documented test results * Recommended queue management and QoS configuration * Recommended VPS specifications * Recommended server location * Route and peering analysis * Packet-loss and jitter analysis * Persistent startup scripts * Health-check scripts * Automatic recovery procedures * A one-command status verification script * A one-command rollback script * Backup copies of all original configurations * Clear documentation explaining every change * Before-and-after measurements * A final report identifying which issues are local, ISP-related, VPS-related, routing-related, or game-server-related The engineer must leave the system stable, reversible, and easy to maintain. Security Requirements The engineer must follow professional security practices: * Use SSH keys instead of permanent password access when possible * Avoid exposing router administration to the public internet * Use temporary credentials * Remove temporary accounts after completion * Protect WireGuard private keys * Avoid unnecessary open ports * Apply a minimal firewall policy * Document every installed service * Avoid unknown scripts or unverified repositories * Create backups before making changes * Provide a complete access-removal checklist after the project What I Do Not Want Please do not apply if your only experience is: * Installing basic commercial VPN applications * Running generic WireGuard installation scripts * Changing DNS servers * Running simple ping tests * Using speed-test websites * Selling preconfigured “gaming VPS” services without technical evidence * Making unrealistic promises about hit registration * Claiming that a VPN can increase weapon damage * Claiming that a VPS can guarantee winning every engagement * Intentionally adding packet loss, delay, jitter, or desynchronization * Recommending random kernel parameters without measuring their effect I need an engineer who tests, measures, explains, documents, and validates every change. Ideal Candidate The ideal candidate will have: * At least five years of professional network engineering experience * Strong Linux administration experience * Proven WireGuard deployments * Experience optimizing latency-sensitive UDP applications * Experience with gaming, VoIP, live video, financial trading, or other real-time systems * Knowledge of BGP, peering, routing, and VPS provider networks * Experience with ASUS routers and VPN Fusion * Strong troubleshooting and packet-analysis skills * Excellent written documentation * The ability to explain technical findings clearly * A cautious and evidence-based approach Relevant certifications are helpful but not mandatory. Examples include: * CCNP Enterprise * CCIE * JNCIP or JNCIE * Linux Foundation certifications * Red Hat certifications * MikroTik MTCRE or MTCINE Practical experience and demonstrated results are more important than certifications alone. Questions Applicants Must Answer Please answer the following questions in your proposal: 1. What experience do you have optimizing WireGuard for latency-sensitive UDP traffic? 2. Have you worked with ASUS VPN Fusion or Asuswrt-Merlin? 3. How would you distinguish packet loss from jitter, packet reordering, interpolation, or server-side desynchronization? 4. How would you test MTU through the complete tunnel instead of only testing the VPN endpoint? 5. How would you determine whether Chicago is the best VPN location? 6. Which tools would you use to compare direct routing against VPN routing? 7. How would you capture traffic simultaneously on the router and VPS? 8. How would you identify bufferbloat or queueing during household traffic? 9. How would you ensure that every change can be safely reversed? 10. Can you provide an example of a similar real-time networking project? 11. What information and access would you need before beginning? 12. What results can you realistically guarantee, and what factors remain outside your control? Project Structure I would prefer to begin with a paid diagnostic phase of approximately two to four hours. After the diagnostic phase, the engineer should provide: * Initial findings * Identified bottlenecks * Recommended changes * Estimated implementation time * Expected realistic improvements * Total project cost The implementation phase should only begin after the diagnostic findings are reviewed and approved.