Applied AI Engineer, Site Reliability Engineer - EMEA

Your mission, alongside the team, is to build and operate the framework to ensure Mistral’s solution delivery is reliable and sustainable - and applied uniformly across all accounts, both Mistral-hosted and customer-hosted. You will operate in four concurrent modes: BUILD - Design for a fleet of Mistral platforms and apps, build proactivity to reduce reactivity, productize reliability, author runbooks, create SLO templates, implement observability. RUN - Operate Tier-1 customer environments that Mistral are contracted to operate, ensure SLO compliance, own on-call and incident response, manage drift, partner with Technical Support as L3 escalation, champion high signal post-mortems. ENABLE - Productize how Mistral deploy, secure, and scale Applied AI solutions, engineer on-demand provisioning, author security baseline packages, embed security guardrails, automate everything. SECURE - Own the security operations layer for customer-side deployments, lead CVE response across the fleet, ship supply-chain integrity controls (SBOM, signed images, provenance), co-page with InfoSec on security incidents, enforce secure-config baselines.

Responsibilities

Build and operate the framework to ensure Mistral’s solution delivery is reliable and sustainable, applied uniformly across all accounts, both Mistral-hosted and customer-hosted; Design for a fleet of Mistral platforms and apps; build proactivity to reduce reactivity; productize reliability; author runbooks; create SLO templates; implement observability; Operate Tier-1 customer environments that Mistral are contracted to operate; ensure SLO compliance; own on-call and incident response; manage drift; partner with Technical Support as L3 escalation; champion high signal post-mortems; Productize how Mistral deploy, secure, and scale Applied AI solutions; engineer on-demand provisioning; author security baseline packages; embed security guardrails; automate everything; Own the security operations layer for customer-side deployments; lead CVE response across the fleet; ship supply-chain integrity controls (SBOM, signed images, provenance); co-page with InfoSec on security incidents; enforce secure-config baselines.

Requirements

Fluent in English; 5+ years in SRE, Production Engineering, or DevOps, with a record of shipping tooling; Strong multi-tenant Kubernetes fluency, namespace segmentation, network policy, RBAC, admission control, operations at scale; On-call discipline: incident response, blameless post-mortem culture, runbook-first mindset; Observability stack in production: Prometheus, Grafana, OpenTelemetry, Loki, Tempo, Signoz; Infrastructure as code: Terraform, Ansible (or close equivalents); Proficient in Python and/or Golang for tooling and automation; Security mindset: you treat secure-SDLC, CVE response, and supply-chain integrity as reliability properties of the shipped artifact, not as someone else's job; Strong written communication skills: runbooks, post-mortems, and customer-facing incident comms are core deliverables of this role; Comfortable operating with high autonomy in an ambiguous, fast-paced environment — and disciplined enough to defend the team's scope when work tries to spill in; Solid Linux internals, networking debug, and distributed-systems fundamentals.

Nice to have

Cloud or application security background (AppSec, K8s security, supply chain — SBOM, cosign, SLSA); at least one of our early hires must bring this, if it's you, flag it; Experience operating LLM / model-serving stacks in production; Experience with multi-cloud or on-prem hybrid customer environments (AWS, GCP, Azure, sovereign clouds); Open-source contributions, particularly in SRE, observability, or security tooling.

Benefits

Healthcare coverage; parental leave; retirement plans; relocation support; wellness programs; meal and transportation allowances; other location-specific perks