DevOps Engineer · Infrastructure & Security

About the role

We’re looking for a DevOps Engineer to own the infrastructure our computer vision platform runs on: k3s clusters in the cloud and Linux inference nodes at customer sites, usually behind restrictive industrial networks. Everything is managed remotely — there is no travel to customer sites.

It’s a hands-on role with a real security mandate. We’re in the final stages of ISO 27001 certification, and you’ll take ownership of the ISMS — carrying it over the certification line and keeping the controls operational rather than parked in a document nobody reads. Our customers are large industrial organisations whose security teams ask hard questions.

What you’ll be doing

• Own and evolve our k3s clusters — cloud production endpoints and on-premise nodes running per-camera inference.
• Administer Linux servers and edge nodes: provisioning, hardening, NVIDIA drivers and CUDA runtime, storage, networking.
• Automate everything with Ansible — server and workstation provisioning, configuration baselines, patching and drift control, so a new node or a new engineer’s machine is a playbook run, not a checklist.
• Build deployment pipelines for GPU inference workloads: image build, rollout, rollback, versioning.
• Design remote access, monitoring and update paths for isolated customer networks.
• Build observability engineers actually use — metrics, logs, alerting, GPU utilisation.
• Take our ISO 27001 ISMS through certification and run it day to day: risk register, access reviews, vulnerability management, backup testing, change control, audit evidence.
• Implement the technical controls behind it: IAM, secrets management, network segmentation, encryption, endpoint hardening.
• Support customer security reviews and due diligence alongside our commercial team.
• Take part in on-call and incident response, and drive the fixes that follow.

What we need to see

• 4+ years in a DevOps, SRE, Platform or Linux infrastructure role.
• Strong Linux administration — you diagnose from the shell, not only from a dashboard.
• Practical Kubernetes (k3s, k8s or equivalent): workloads, networking, storage, RBAC, ingress, and debugging clusters that misbehave.
• Real depth in Ansible (or an equivalent CM tool) across both servers and end-user workstations.
• Containers (Docker/containerd) and Infrastructure as Code (Terraform, Helm or similar).
• Hands-on ISO 27001 experience — implementing, maintaining or being audited against it.
• Python and/or Bash, plus CI/CD (GitHub Actions, GitLab CI, Azure DevOps).
• Networking fundamentals: TCP/IP, DNS, TLS, VPNs, firewalls, NAT.
• Polish and English at B2 — you’ll talk to our team and to customers’ IT and security staff.
• Based in or around Wrocław, able to work hybrid.

Ways to stand out

• GPU workloads in Kubernetes (NVIDIA device plugin, MIG, GPU scheduling).
• ML inference serving (Triton, ONNX Runtime, TensorRT) or real-time video/RTSP pipelines.
• Operating edge or on-premise fleets across many sites.
• GDPR in a technical context; exposure to SOC 2, NIS2 or EU AI Act logging requirements.
• Having taken an organisation through a certification audit end to end.
• Azure or Nebius.

What we offer

• Direct collaboration with the founders on bleeding-edge technology.
• Real ownership of the platform’s infrastructure and security posture.
• Remote work.
• Friendly start-up atmosphere in a fast-growing company.
• Co-financing of private medical care and a Multisport package (50%).
• Gaming laptop, company off-sites.