Secure CI/CD DevOps Engineer for AI Infra

Gcore; Polska; Híbrido; PLN 180 000 - 320 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible working hours

Hybrid or remote options depending on/

Work from anywhere up to 45 days per/

Private medical insurance

Extra vacation and sick leave

Language courses

Modern offices with snacks and events

Team sports and social activities

Resumo da oferta

Gcore is hiring a DevOps/SRE Engineer to join our AI Inference Operations Team, focusing on security and license compliance of Everywhere AI. You will design, build, and maintain a secure CI/CD pipeline, and ensure software supply chain integrity across Docker images and Kubernetes workloads.

You will implement automated vulnerability scanning, signing, and verification, while advancing security controls in the CI/CD lifecycle and collaborating with a global tech partner network.

Qualificações

• Strong hands-on experience with Docker, container security, and image optimization.
• Practical experience building and maintaining GitLab CI/CD pipelines.
• Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
• Solid understanding of Linux security, system hardening, and vulnerability management.
• Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
• Familiarity with container image signing and verification (Cosign, Sigstore).
• Strong scripting skills (Bash, Python) and a security-first mindset.

Responsabilidades

• Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
• Implement automated vulnerability scanning for Docker images and dependencies.
• Identify, investigate, and remediate security vulnerabilities in container images.
• Harden Docker images by minimizing attack surfaces and applying security best practices.
• Implement container image signing and verification to ensure software supply chain integrity.
• Automate security checks and enforce security policies throughout the CI/CD lifecycle.
• Secure and maintain Kubernetes workloads, configurations, and deployments.

Conhecimentos

Docker

Container security

Image optimization

GitLab CI/CD

Kubernetes

Linux security

Vulnerability management

Container vulnerability scanning

Container image signing

Scripting Bash

Scripting Python

Ferramentas

GitLab CI/CD

Kubernetes

Trivy

Grype

Cosign

Sigstore

Bash

Python

Descrição da oferta de emprego

This position is available only under an employment (labor) agreement.

The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. AtGcore,you’llhelp design and deliver that foundation for an AI-driven world.

We’rea global provider of infrastructure and software solutions forAI, cloud, network, and security,powering everything from real-time communication and streaming to enterprise AI and secure web applications. With210+ edge locations, 50+ cloud regions, and thousands of GPUs, your work here can reach users and businesses across the globe.

You’llcollaborate with leading technology partners such asIntel, NVIDIA, Dell, and Equinix, and work on platforms that power digital products used around the world. Our vision is simple: to connect the world to AI, anywhere, anytime.

Want to work on technology that goes beyonda single productor industry?Join a global team of550+professionalsbuilding infrastructure and software that supports the entire digital ecosystem.

We are looking for a talented DevOps/SRE Engineer to join our AI Inference Operations Team.

Job Description

The employee will be dedicated full-time to ensuring the security and license compliance of our Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, as well as designing, building, and maintaining its CI/CD deployment pipeline.

What You Will Do

• Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
• Implement automated vulnerability scanning for Docker images and dependencies.
• Identify, investigate, and remediate security vulnerabilities in container images.
• Harden Docker images by minimizing attack surfaces and applying security best practices.
• Implement container image signing and verification to ensure software supply chain integrity.
• Automate security checks and enforce security policies throughout the CI/CD lifecycle.
• Secure and maintain Kubernetes workloads, configurations, and deployments.

Qualifications

What We're Looking For

• Strong hands-on experience with Docker, container security, and image optimization.
• Practical experience building and maintaining GitLab CI/CD pipelines.
• Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
• Solid understanding of Linux security, system hardening, and vulnerability management.
• Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
• Familiarity with container image signing and verification (Cosign, Sigstore).
• Strong scripting skills (Bash, Python) and a security-first mindset.

Preferred Qualifications

• 3+ years of experience in DevOps, DevSecOps, or Platform Engineering.
• Experience implementing security controls in CI/CD pipelines.
• Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.
• Knowledge of software supply chain security, SBOMs, and artifact provenance.
• Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar).
• Familiarity with Helm and container registries.
• Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST).

Nice to Have

• Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno).
• Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench).
• Experience with Infrastructure as Code (Terraform, Ansible).
• Knowledge of the SLSA framework and software supply chain security practices.
• Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot).

Additional Information

At Gcore, we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work:

• Competitive compensation
• Flexible working hours and hybrid or remote options, depending on your role
• Work from anywhere in the world for up to45 days per year
• Private medical insurance for you and your family*
• Extra paid vacation and sick leave days*
• Support for life’s important moments and celebrations
• Language courses to help you connect and grow
• Modern, welcoming offices with snacks, drinks, and entertainment*
• Team sports and social activities*

*Benefits may vary depending on your location.

Equal Opportunity Employer

We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply