DevOps Engineer · Infrastructure & Security

About Surveily

Surveily is a start-up on a mission to transform the Health and Safety standards of workplaces around the globe. Our technology monitors and improves conditions in some of the most challenging and dangerous environments, using Machine Learning and real-time data to make people's workday safer.

About the role

We're looking for a DevOps Engineer to own the infrastructure our computer vision platform runs on: k3s clusters in the cloud and Linux inference nodes at customer sites, usually behind restrictive industrial networks. Everything is managed remotely — there is no travel to customer sites.

It's a hands-on role with a real security mandate. We're in the final stages of ISO 27001 certification, and you'll take ownership of the ISMS — carrying it over the certification line and keeping the controls operational rather than parked in a document nobody reads. Our customers are large industrial organisations whose security teams ask hard questions.

What you'll be doing 

• Own and evolve our k3s clusters — cloud production endpoints and on-premise nodes running per-camera inference. 

• Administer Linux servers and edge nodes: provisioning, hardening, NVIDIA drivers and CUDA runtime, storage, networking. 

• Automate everything with Ansible — server and workstation provisioning, configuration baselines, patching and drift control, so a new node or a new engineer's machine is a playbook run, not a checklist. 

• Build deployment pipelines for GPU inference workloads: image build, rollout, rollback, versioning. 

• Design remote access, monitoring and update paths for isolated customer networks. 

• Build observability engineers actually use — metrics, logs, alerting, GPU utilisation. 

• Take our ISO 27001 ISMS through certification and run it day to day: risk register, access reviews, vulnerability management, backup testing, change control, audit evidence. 

• Implement the technical controls behind it: IAM, secrets management, network segmentation, encryption, endpoint hardening. 

• Support customer security reviews and due diligence alongside our commercial team. 

• Take part in on-call and incident response, and drive the fixes that follow. 

What we need to see 

• 4+ years in a DevOps, SRE, Platform or Linux infrastructure role. 

• Strong Linux administration — you diagnose from the shell, not only from a dashboard. 

• Practical Kubernetes (k3s, k8s or equivalent): workloads, networking, storage, RBAC, ingress, and debugging clusters that misbehave. 

• Real depth in Ansible (or an equivalent CM tool) across both servers and end-user workstations. 

• Containers (Docker/containerd) and Infrastructure as Code (Terraform, Helm or similar). 

• Hands-on ISO 27001 experience — implementing, maintaining or being audited against it. 

• Python and/or Bash, plus CI/CD (GitHub Actions, GitLab CI, Azure DevOps). 

• Networking fundamentals: TCP/IP, DNS, TLS, VPNs, firewalls, NAT. 

• Polish and English at B2 — you'll talk to our team and to customers' IT and security staff. 

• Based in or around Wrocław, able to work hybrid. 

Ways to stand out 

• GPU workloads in Kubernetes (NVIDIA device plugin, MIG, GPU scheduling). 

• ML inference serving (Triton, ONNX Runtime, TensorRT) or real-time video/RTSP pipelines. 

• Operating edge or on-premise fleets across many sites. 

• GDPR in a technical context; exposure to SOC 2, NIS2 or EU AI Act logging requirements. 

• Having taken an organisation through a certification audit end to end. 

• Azure or Nebius. 

What we offer 

• Direct collaboration with the founders on bleeding-edge technology. 

• Real ownership of the platform's infrastructure and security posture. 

• Remote work.

• Friendly start-up atmosphere in a fast-growing company. 

• Co-financing of private medical care and a Multisport package (50%). 

• Gaming laptop, company off-sites. 

Questions? Email us at [email protected]