DevOps/SRE Engineer – AI Inference

• Ensure the security and license compliance of the Everywhere AI product
• Scan for open-source license violations and security vulnerabilities
• Design, build, and maintain secure CI/CD deployment pipelines using GitLab CI/CD
• Implement automated vulnerability scanning for Docker images and dependencies
• Identify, investigate, and remediate security vulnerabilities in container images
• Harden Docker images by minimizing attack surfaces and applying security best practices
• Implement container image signing and verification
• Automate security checks and enforce security policies throughout the CI/CD lifecycle
• Secure and maintain Kubernetes workloads, configurations, and deployments

• Strong hands-on experience with Docker, container security, and image optimization
• Practical experience building and maintaining GitLab CI/CD pipelines
• Hands-on experience with Kubernetes, including workload deployment, configuration, and security
• Solid understanding of Linux security, system hardening, and vulnerability management
• Experience with container vulnerability scanning tools (Trivy, Grype, or similar)
• Familiarity with container image signing and verification (Cosign, Sigstore)
• Strong scripting skills (Bash, Python)
• Security-first mindset
• 3+ years of experience in DevOps, DevSecOps, or Platform Engineering
• Experience implementing security controls in CI/CD pipelines
• Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers
• Knowledge of software supply chain security, SBOMs, and artifact provenance
• Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar)
• Familiarity with Helm and container registries
• Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST)
• Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno)
• Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench)
• Experience with Infrastructure as Code (Terraform, Ansible)
• Knowledge of the SLSA framework and software supply chain security practices
• Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot)

• Competitive compensation
• Flexible working hours
• Hybrid or remote options, depending on your role
• Work from anywhere in the world for up to 45 days per year
• Private medical insurance for you and your family*
• Extra paid vacation and sick leave days*
• Support for life’s important moments and celebrations
• Language courses
• Modern, welcoming offices with snacks, drinks, and entertainment*
• Team sports and social activities*