The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. At Gcore, you’ll help design and deliver that foundation for an AI-driven world. We’re a global provider of infrastructure and software solutions for AI, cloud, network, and security, powering everything from real-time communication and streaming to enterprise AI and secure web applications. We are looking for a talented DevOps/SRE Engineer to join our AI Inference Operations Team.
DevOps engineer for AI inference
подготовься к отклику
ai-инструментыЧтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
описание
задачи
- Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
- Implement automated vulnerability scanning for Docker images and dependencies.
- Identify, investigate, and remediate security vulnerabilities in container images.
- Harden Docker images by minimizing attack surfaces and applying security best practices.
- Implement container image signing and verification to ensure software supply chain integrity.
- Automate security checks and enforce security policies throughout the CI/CD lifecycle.
- Secure and maintain Kubernetes workloads, configurations, and deployments.
требования
- Strong hands-on experience with Docker, container security, and image optimization.
- Practical experience building and maintaining GitLab CI/CD pipelines.
- Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
- Solid understanding of Linux security, system hardening, and vulnerability management.
- Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
- Familiarity with container image signing and verification (Cosign, Sigstore).
- Strong scripting skills (Bash, Python) and a security-first mindset.
- Будет плюсом: 3+ years of experience in DevOps, DevSecOps, or Platform Engineering; Experience implementing security controls in CI/CD pipelines; Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers; Knowledge of software supply chain security, SBOMs, and artifact provenance; Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar); Familiarity with Helm and container registries; Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST); Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno); Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench); Experience with Infrastructure as Code (Terraform, Ansible); Knowledge of the SLSA framework and software supply chain security practices; Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot)
условия
- Competitive compensation
- Flexible working hours and hybrid or remote options, depending on your role
- Work from anywhere in the world for up to 45 days per year
- Private medical insurance for you and your family*
- Extra paid vacation and sick leave days*
- Support for life’s important moments and celebrations
- Language courses to help you connect and grow
- Modern, welcoming offices with snacks, drinks, and entertainment*
- Team sports and social activities*
навыки
Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.