Sovereign Engineering Platform SRE (DevOps Engineer) (m/f/d)

Odmeňovanie

From 2 100 EUR/month

Final salary is negotiable.

We are offering base salary depending on seniority level and previous experience of candidate. In addition to base salary we provide variable part and other financial benefits.

Náplň práce

Design, build, and operate the secure infrastructure foundation used by engineering teams for AI-assisted software development, model experimentation, repository analysis, CI/CD execution, and controlled handover work in isolated or sovereignty-sensitive environments.

This infrastructure and operations role centers on Kubernetes-based engineering platforms, GitOps, private registries, internal model endpoints, observability, access control, and reliable operations for AI-enabled SDLC workloads. The candidate should enable engineering velocity while preserving security, auditability, and operational discipline.

Čo budete robiť

• Build and operate Kubernetes environments that host AI engineering tools, internal model gateways, retrieval components, workflow services, CI/CD runners, and documentation services.
• Implement GitOps and Infrastructure as Code patterns for reproducible provisioning, configuration, policy enforcement, platform upgrades, and disaster recovery readiness.
• Manage private registries, package mirrors, secrets, identity integration, network segmentation, storage classes, backup routines, and controlled connectivity models.
• Provide observability for engineering workloads, including metrics, logs, traces, GPU and CPU utilization, service health, cost signals, and operational runbooks.
• Work with software, security, and architecture teams to ensure the platform supports AI-assisted SDLC workflows without creating uncontrolled data exposure or audit gaps.

Očakávané nástroje a komponenty

• Platform tooling such as Kubernetes, Helm, Terraform, Ansible, ArgoCD, Crossplane, GitLab runners, Jenkins agents, private registries, and internal package mirrors.
• AI platform components such as vLLM, Ollama, OpenAI-compatible gateways, Qdrant or similar vector stores, Open WebUI, Continue-compatible endpoints, and workflow services.
• Observability and operations stacks such as Prometheus, Grafana, Loki, OpenTelemetry, ELK/OpenSearch, Alertmanager, SRE runbooks, and incident management tooling.
• Security and governance components such as Vault, Keycloak, network policies, RBAC, admission controls, image scanning, SBOM tooling, and audit logging.
• Infrastructure awareness covering GPU-backed nodes, CPU-only fallback, storage performance, network isolation, proxy patterns, on-premise environments, and dedicated landing zones.