DevOps/SRE Engineer – AI Inference

This is a fully remote position, open to applicants in Cyprus, +3 more countries.

📋 Description

• Ensure the security and compliance with licensing for the Everywhere AI product.

• Conduct scans for open-source license infringements and security vulnerabilities.

• Design, create, and sustain secure CI/CD deployment pipelines utilizing GitLab CI/CD.

• Implement automated vulnerability scanning for Docker images and their dependencies.

• Identify, analyze, and remediate security vulnerabilities present in container images.

• Strengthen Docker images by reducing attack surfaces and applying security best practices.

• Implement signing and verification for container images.

• Automate security checks and enforce security protocols throughout the CI/CD lifecycle.

• Securely manage and maintain Kubernetes workloads, configurations, and deployments.

⛳️ Requirements

• Extensive hands-on experience with Docker, container security, and image optimization.

• Practical experience in building and maintaining GitLab CI/CD pipelines.

• Hands-on experience with Kubernetes, covering workload deployment, configuration, and security.

• Strong understanding of Linux security, system hardening, and vulnerability management.

• Familiarity with container vulnerability scanning tools such as Trivy, Grype, or similar.

• Knowledge of container image signing and verification tools like Cosign and Sigstore.

• Proficient scripting abilities in Bash and Python.

• A security-first approach to development.

• Over 3 years of experience in DevOps, DevSecOps, or Platform Engineering.

• Experience in implementing security controls within CI/CD pipelines.

• Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.

• Understanding of software supply chain security, SBOMs, and artifact provenance.

• Experience working with minimal and hardened container images like Alpine, Distroless, or Chainguard.

• Familiarity with Helm and container registries.

• Awareness of security standards and best practices, including CIS Benchmarks, OWASP, and NIST.

• Experience with Kubernetes policy-as-code tools, such as OPA Gatekeeper and Kyverno.

• Familiarity with Kubernetes security tools including Falco, Kubescape, and kube-bench.

• Experience with Infrastructure as Code tools, like Terraform and Ansible.

• Knowledge of the SLSA framework and practices related to software supply chain security.

• Experience with automated dependency updates and vulnerability remediation tools like Renovate and Dependabot.

🏝️ Benefits

• Competitive compensation package.

• Flexible working hours.

• Options for hybrid or remote work depending on your position.

• Ability to work from anywhere globally for up to 45 days per year.

• Comprehensive private medical insurance for you and your family.*

• Additional paid vacation and sick leave days.*

• Support for significant life moments and celebrations.

• Language courses available.

• Modern and inviting office spaces equipped with snacks, drinks, and entertainment.*

• Opportunities for team sports and social activities.*