DevOps/SRE Engineer (AI Inference)

The employee will be dedicated full-time to ensuring the security and license compliance of our Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, as well as designing, building, and maintaining its CI/CD deployment pipeline.
What You Will Do
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Identify, investigate, and remediate security vulnerabilities in container images.
Harden Docker images by minimizing attack surfaces and applying security best practices.
Implement container image signing and verification to ensure software supply chain integrity.
Automate security checks and enforce security policies throughout the CI/CD lifecycle.
Secure and maintain Kubernetes workloads, configurations, and deployments.
What We're Looking For
Strong hands-on experience with Docker, container security, and image optimization.
Practical experience building and maintaining GitLab CI/CD pipelines.
Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
Solid understanding of Linux security, system hardening, and vulnerability management.
Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
Familiarity with container image signing and verification (Cosign, Sigstore).
Strong scripting skills (Bash, Python) and a security-first mindset.
Preferred Qualifications
3+ years of experience in DevOps, DevSecOps, or Platform Engineering.
Experience implementing security controls in CI/CD pipelines.
Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.
Knowledge of software supply chain security, SBOMs, and artifact provenance.
Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar).
Familiarity with Helm and container registries.
Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST).
Nice to Have
Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno).
Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench).
Experience with Infrastructure as Code (Terraform, Ansible).
Knowledge of the SLSA framework and software supply chain security practices.
Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot).

Employment type
Full-time

Work arrangement
Yes