DevOps/SRE Engineer (AI Inference)

Gcore; United States; Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Гибкий график

Гибридная или удаленная работа

Медицинская страховка

Дополнительный отпуск и больничные

Курсы языков

Job summary

Gcore ищет талантливого DevOps/SRE инженера для работы в команде AI Inference Operations. Вы будете сосредоточены на защите и лицензии Everywhere AI продукта, проектировании и поддержке CI/CD пайплайнов, автоматизации проверок безопасности.

Требуется опыт работы с Docker, Kubernetes, GitLab CI/CD; знание инструментов скана уязвимостей, подписывания образов и управления безопасностью цепочки поставок. Предлагается гибридный/удаленный режим, медицинское страхование, дополнительный отпуск.

Qualifications

• Опыт работы в DevOps/DevSecOps не менее 3 лет.
• Навыки настройки безопасных CI/CD пайплайнов.
• Опыт работы с Docker, Kubernetes и безопасностью контейнеров.
• Знание инструментов сканирования уязвимостей и подписания образов.

Responsibilities

• Поддержка и улучшение CI/CD пайплайнов в GitLab CI/CD.
• Разработка и обеспечение безопасности рабочих нагрузок Kubernetes.
• Установка и настройка инструментов сканирования уязвимостей.
• Подпись и проверка образов контейнеров (Cosign/Sigstore).
• Обеспечение защиты цепочки поставок ПО и SBOM.

Skills

Docker

контейнерная безопасность

GitLab CI/CD

Kubernetes

Linux безопасность

Scripting (Bash, Python)

CI/CD безопасность

SBOMs/software supply chain

RBAC/NetworkPolicies

Tools

Trivy

Grype

Cosign

Sigstore

Helm

kube-bench

Kubescape

Terraform

Ansible

Job description

Описание:

This position is available only under an employment (labor) agreement. The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. At Gcore, you’ll help design and deliver that foundation for an AI-driven world. We’re a global provider of infrastructure and software solutions for AI, cloud, network, and security, powering everything from real-time communication and streaming to enterprise AI and secure web applications. With 210+ edge locations, 50+ cloud regions, and thousands of GPUs, your work here can reach users and businesses across the globe. You’ll collaborate with leading technology partners such as Intel, NVIDIA, Dell, and Equinix, and work on platforms that power digital products used around the world. Our vision is simple: to connect the world to AI, anywhere, anytime. Want to work on technology that goes beyond a single product or industry? Join a global team of 550+ professionals building infrastructure and software that supports the entire digital ecosystem. We are looking for a talented DevOps/SRE Engineer to join our AI Inference Operations Team.

Задачи:

The employee will be dedicated full-time to ensuring the security and license compliance of our Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, as well as designing, building, and maintaining its CI/CD deployment pipeline. Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD. Implement automated vulnerability scanning for Docker images and dependencies. Identify, investigate, and remediate security vulnerabilities in container images. Harden Docker images by minimizing attack surfaces and applying security best practices. Implement container image signing and verification to ensure software supply chain integrity. Automate security checks and enforce security policies throughout the CI/CD lifecycle. Secure and maintain Kubernetes workloads, configurations, and deployments.

Требования:

• Strong hands-on experience with Docker, container security, and image optimization.
• Practical experience building and maintaining GitLab CI/CD pipelines.
• Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
• Solid understanding of Linux security, system hardening, and vulnerability management.
• Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
• Familiarity with container image signing and verification (Cosign, Sigstore).
• Strong scripting skills (Bash, Python) and a security-first mindset.
• 3+ years of experience in DevOps, DevSecOps, or Platform Engineering.
• Experience implementing security controls in CI/CD pipelines.
• Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.
• Knowledge of software supply chain security, SBOMs, and artifact provenance.
• Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar).
• Familiarity with Helm and container registries.
• Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST).
• Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno).
• Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench).
• Experience with Infrastructure as Code (Terraform, Ansible).
• Knowledge of the SLSA framework and software supply chain security practices.
• Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot).

Условия:

• At Gcore, we want you to do your best work and enjoy the journey.
• Competitive compensation
• Flexible working hours and hybrid or remote options, depending on your role
• Work from anywhere in the world for up to 45 days per year
• Private medical insurance for you and your family*
• Extra paid vacation and sick leave days*
• Support for life’s important moments and celebrations
• Language courses to help you connect and grow
• Modern, welcoming offices with snacks, drinks, and entertainment*
• Team sports and social activities*
• Benefits may vary depending on your location.