DevOps/SRE Engineer (AI Inference)

Gcore•Serbia, GA

About The Position

Gcore is hiring a DevOps/SRE Engineer to join its AI Inference Operations Team. The role is dedicated full-time to ensuring the security and license compliance of the Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, and designing, building, and maintaining its CI/CD deployment pipeline. The engineer will build secure delivery processes and strengthen the security of container images and Kubernetes workloads. Responsibilities include automated vulnerability scanning and remediation, image hardening and signing, enforcing security checks and policies throughout the CI/CD lifecycle, and maintaining secure Kubernetes deployments.

Requirements

Strong hands-on experience with Docker, container security, and image optimization.
Practical experience building and maintaining GitLab CI/CD pipelines.
Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
Solid understanding of Linux security, system hardening, and vulnerability management.
Experience with container vulnerability scanning tools such as Trivy, Grype, or similar.
Familiarity with container image signing and verification, such as Cosign or Sigstore.
Strong scripting skills in Bash and Python.
A security-first mindset.

Nice To Haves

3+ years of experience in DevOps, DevSecOps, or Platform Engineering.
Experience implementing security controls in CI/CD pipelines.
Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.
Knowledge of software supply chain security, SBOMs, and artifact provenance.
Experience working with minimal and hardened container images such as Alpine, Distroless, or Chainguard.
Familiarity with Helm and container registries.
Understanding of security standards and best practices such as CIS Benchmarks, OWASP, and NIST.
Experience with Kubernetes policy-as-code tools such as OPA Gatekeeper or Kyverno.
Familiarity with Kubernetes security tools such as Falco, Kubescape, or kube-bench.
Experience with Infrastructure as Code tools such as Terraform or Ansible.
Knowledge of the SLSA framework and software supply chain security practices.
Experience with automated dependency updates and vulnerability remediation tools such as Renovate or Dependabot.

Responsibilities

Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Identify, investigate, and remediate security vulnerabilities in container images.
Harden Docker images by minimizing attack surfaces and applying security best practices.
Implement container image signing and verification to ensure software supply chain integrity.
Automate security checks and enforce security policies throughout the CI/CD lifecycle.
Secure and maintain Kubernetes workloads, configurations, and deployments.