platform engineer for AI agent platforms

Stellenbeschreibung:

Описание:

The project supports initiatives in AWS, AI, and data engineering for a major science and technology company in the pharmaceutical industry, with plans to launch more than 20 additional initiatives.

Задачи:

Design, provision, and manage AWS infrastructure using Terraform in line with the AWS Well-Architected Framework; Own and operate EKS clusters end-to-end, including managed node group lifecycle, Karpenter autoscaling, cluster add-ons upgrades, IRSA configuration, and multi-AZ resilience; Build and maintain automated deployment pipelines with GitHub Actions and ArgoCD; Enable Dev, QA, and Production deployments across multiple environments; Implement Blue/Green and Canary release strategies; Integrate AWS-native security and governance controls; Enforce policy controls using OPA and Kyverno admission controllers; Implement and manage the observability stack with Amazon Managed Prometheus, Amazon Managed Grafana, CloudWatch Container Insights, and AWS X-Ray; Leverage Amazon Bedrock, SageMaker, and Comprehend for AI agent orchestration; Implement cost-efficient architecture practices using Spot Instances, Savings Plans, Karpenter bin-packing, and scheduled scale-to-zero; Partner with platform and ML teams to onboard AI agent workloads; Integrate MCP servers and execution frameworks; Support extensibility of the agent ecosystem.

Требования:

4+ Years of hands-on AWS experience; AWS Solutions Architect certification at Associate or Professional level; Strong hands-on experience with EKS cluster provisioning and operations; Experience with managed node groups, Karpenter, and Helm chart management; Knowledge of Kubernetes RBAC and network policies; Advanced Terraform skills, including modular design, remote state management, multi-environment configuration, and security scanning with Checkov or tfsec; Deep knowledge of EKS, ECR, ALB, Route 53, ACM, IAM, KMS, Secrets Manager, IAM Identity Center, CloudTrail, AWS Config, GuardDuty, Security Hub, and AWS WAF; Practical experience with Amazon Bedrock, SageMaker, and Comprehend; Experience with GitOps tools such as ArgoCD or Flux; Experience building CI/CD pipelines for container workloads; Experience with OIDC federation between GitHub Actions and AWS and EKS OIDC provider integration; Familiarity with Prometheus, Grafana, OpenTelemetry, AWS X-Ray, and CloudWatch Logs Insights; Strong understanding of Pod Security Standards, Network Policies, admission webhooks, and service account least-privilege principles; English at B2 Upper Intermediate level; Nice to have: AWS DevOps Engineer or Security Specialty certification, LangChain or Claude Agent SDK, A2A, MCP, Amazon Bedrock Agents, Knowledge Bases or Guardrails, AWS Fault Injection Service, multi-tenant platform design, Python, Go or Node.js, AWS Cost Explorer, Compute Optimizer, tagging governance, Savings Plan management.