DevOps 工程師 ｜ DevOps Engineer

【職位概述】

Tricuss (十論科技) 致力於顛覆傳統研發流程（Revolutionize R&D）。旗艦產品「企業級 Co-researcher AI Agent」為自主虛擬科學家，融合 Agentic AI、大數據與物理模擬，能自主設計假說、推演，並自動檢索論文與內部資料以加速研發探索。

我們將系統與「物理基礎數位孿生（Physics-based Digital Twins）」深度結合，專為地端（On-premise）與封閉網路（Air-gapped）高資安客戶打造，實現最高千倍加速並減少 70% 實體實驗。目前我們與 NVIDIA、Qualcomm、Intel 及世界頂尖半導體與 AI 伺服器供應鏈客戶密切合作，邀您共同定義下一代研發標準。

身為 DevOps 工程師，您將是確保我們的企業級產品能在最高安全規格的地端環境 (On-premises) 中穩定運行的核心守門員。由於我們的客戶群高度重視資訊安全與資料隱私，您將專注於將「安全性 (Security)」深植於基礎架構與自動化流程的每一個環節，實踐真正的 DevSecOps 理念。您必須具備深厚的作業系統、網路與地端叢集管理底蘊，負責設計並維護即使在封閉網路 (Air-gapped) 或高監管環境下，依然能高效交付、嚴密監控且具備高度防禦力的系統架構。

【主要職責】

• 地端架構設計與自動化部署： 負責企業客戶地端 (On-premise) 基礎架構的評估與建置規劃，涵蓋裸機 (Bare Metal)、企業級虛擬化環境 (如 VMware) 及地端 Kubernetes 叢集 的自動化配置與生命週期管理。

• DevSecOps 與企業級安全合規： 將極致的資安標準無縫整合至軟體開發生命週期 (SDLC)。實施源碼掃描 (SAST/DAST)、軟體物料清單 (SBOM) 管理與容器弱點掃描，並積極配合企業客戶進行滲透測試、漏洞修補與資安合規稽核 (如 ISO 27001, 零信任架構)。

• 封閉網路 (Air-gapped) CI/CD 管線建置： 設計並維護適用於無網際網路連線或高資安限制環境的持續整合與持續交付流程。自建並管理內網專用的程式碼代管與軟體資源庫 (如 ，確保交付過程的高效與絕對安全。

• 系統網路安全與存取控制： 嚴格設計系統邊界與內部網路的防護機制。設定防火牆規則、網路隔離 (Network Segmentation)、反向代理 (Reverse Proxy)，並落實基於角色的存取控制 (RBAC) 與最小權限原則 (PoLP)，防止未授權的橫向移動與資料外洩。

• 地端系統可觀測性與日誌稽核： 建置可完全獨立運作的地端監控、日誌收集與分析平台 (如 Prometheus, Grafana, ELK/EFK Stack)。確保所有系統行為、API 呼叫與管理員操作皆具備完整的軌跡紀錄 (Audit Trails)，並設計符合企業資安規範的即時告警機制。

• 軟體交付與升級機制封裝： 針對地端環境的特殊性，將複雜的微服務架構封裝為易於交付、安裝與驗證的格式 (如 Helm Charts, 離線安裝包、OVA 映像檔)。建立標準化的部署手冊，確保產品能在客戶端環境中平滑升級、降版與災難復原。

===

【Position Overview】

As a DevOps Engineer, you are the core gatekeeper keeping our enterprise product running reliably in on-premises environments held to the highest security standards. Because our customers place enormous value on information security and data privacy, you will embed "Security" into every layer of infrastructure and automation—putting true DevSecOps into practice. You bring deep expertise in operating systems, networking, and on-premise cluster management, and will design and maintain architectures that stay efficient to deliver, rigorously monitored, and strongly defensible even in air-gapped or heavily regulated environments.

【Key Responsibilities】

• On-premise architecture design and automated deployment: Own assessment and build planning for enterprise customers' on-premise infrastructure—covering automated provisioning and lifecycle management across bare metal, enterprise virtualization (e.g., VMware), and on-premise Kubernetes clusters (e.g., Rancher, OpenShift, Kubespray).

• DevSecOps and enterprise-grade security compliance: Integrate uncompromising security into the SDLC. Implement source code scanning (SAST/DAST), SBOM management, and container vulnerability scanning, while supporting customers through penetration testing, vulnerability remediation, and compliance audits (e.g., ISO 27001, Zero Trust).

• Air-gapped CI/CD pipeline development: Design and maintain CI/CD pipelines for environments with no internet connectivity or stringent security constraints. Build and operate self-hosted, intranet-only code hosting and repositories to keep delivery both efficient and absolutely secure.

• System network security and access control: Rigorously design protections for system boundaries and internal networks. Configure firewall rules, network segmentation, and reverse proxies, and enforce RBAC and the principle of least privilege (PoLP) to prevent unauthorized lateral movement and data exfiltration.

• On-premise system observability and log auditing: Build fully self-contained on-premise monitoring, log collection, and analytics platforms. Ensure all system behaviors, API calls, and admin actions are captured in audit trails, and design real-time alerting that meets enterprise security requirements.

• Software delivery and upgrade packaging: Package complex microservice architectures into formats easy to deliver, install, and validate for on-premise environments. Establish standardized deployment runbooks for smooth upgrades, rollbacks, and disaster recovery in customer environments.