DevOps/SRE Engineer (AI Inference)

Gcore is hiring a DevOps/SRE Engineer for its AI Inference Operations Team. The role focuses on securing the Everywhere AI product, ensuring open-source license and security compliance, and building and maintaining its CI/CD deployment pipeline.

Responsibilities:

• Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD
• Implement automated vulnerability scanning for Docker images and dependencies
• Identify, investigate, and remediate security vulnerabilities in container images
• Harden Docker images by minimizing attack surfaces and applying security best practices
• Implement container image signing and verification to ensure software supply chain integrity
• Automate security checks and enforce security policies throughout the CI/CD lifecycle
• Secure and maintain Kubernetes workloads, configurations, and deployments

Requirements:

• Strong hands-on experience with Docker, container security, and image optimization
• Practical experience building and maintaining GitLab CI/CD pipelines
• Hands-on experience with Kubernetes, including workload deployment, configuration, and security
• Solid understanding of Linux security, system hardening, and vulnerability management
• Experience with container vulnerability scanning tools (Trivy, Grype, or similar)
• Familiarity with container image signing and verification (Cosign, Sigstore)
• Strong scripting skills (Bash, Python) and a security-first mindset
• 3+ years of experience in DevOps, DevSecOps, or Platform Engineering
• Experience implementing security controls in CI/CD pipelines
• Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers
• Knowledge of software supply chain security, SBOMs, and artifact provenance
• Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar)
• Familiarity with Helm and container registries
• Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST)
• Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno)
• Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench)
• Experience with Infrastructure as Code (Terraform, Ansible)
• Knowledge of the SLSA framework and software supply chain security practices
• Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot)