[Remote] Staff AI Platform Engineer

Note: The job is a remote job and is open to candidates in USA. Sysdig is a cloud security company focused on helping organizations secure innovation in the cloud through runtime insights, open innovation, and agentic AI. The Staff AI Platform Engineer will own the business-side AI platform, including Bedrock runtime configuration, MCP infrastructure, agent-hosting standards, secure automation, governance, telemetry, and cross-functional alignment across IT, Security, and DevX.

Responsibilities

• Drive the business-side Bedrock runtime and gateway configuration - model access, cost attribution, content-filtering guardrails, model pinning, and quota management, behind an AWS/Okta-SSO'd gateway - co-owned with our DevX lead, who leads the shared-substrate architecture
• Build and run the MCP fleet - ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and own the MCP registry. Partner with IT to graduate MCPs into stable, IT-managed assets
• Make the secure path the easy path without administering identity or devices yourself: author the MDM config payload and the Okta-group-to-IAM mapping that IT pushes and enforces, and specify the desktop client setup and auth flows for non-technical employees
• Build the AI and agent-triggered automations (approvals, spend alerts, agent-initiated workflows); general business automation stays with IT
• Own the technical direction for the agent-hosting substrate other teams build on - the design docs and standards, not just the code. There is no existing pattern today; you set it, and other teams adopt it as their default
• Define what "healthy" and "safe to ship" mean for every agent and MCP server on the platform - the cost, usage, and reliability telemetry (the Bedrock-to-Snowflake pipeline, identity-matched, with threshold alerting), plus a tiered-autonomy model: what stays read-only, what can act, what needs a human in the loop or a rollback path
• Build the governance that standard requires. Route workflows by data sensitivity, enforce least privilege and auditability, and keep unproven models sandboxed away from production data
• Drive alignment across IT, Security, and DevX on the platform's direction - get multiple teams building against a written standard without owning their roadmaps

Skills

• 6+ years in software engineering, platform engineering, or DevOps, including ownership of something in production that others depended on
• Hands-on AWS - IAM, ECS or Lambda, CloudWatch, and working VPC knowledge. Required, not a bonus
• Full-stack range - backend services, APIs, CI/CD, containerized deployments
• Builder - you can write an MCP server or API integration from scratch, not just wire up a managed connector
• Hands-on with LLMs - comfortable with LLM APIs, prompt engineering, and agent development; you've shipped something with them
• Self-direction - you can take an underspecified task and figure out the ambiguous parts to create impactful solutions
• A bias to ship, and to automate the thing you just did by hand
• Willingness to own the boring parts: upgrades, credentials, quotas, on-call reality
• Candor: you raise problems and disagreements early, including when a platform choice looks wrong
• Judgment about when to buy instead of build. We would rather run a small, coherent stack than a perfect, sprawling one

Benefits

• Extra days off to prioritize your well-being
• 401(k) Retirement Savings Plan with a 3% company match
• Maternity and Parental Leave
• Mental health support for you and your family through the Modern Health app
• Full health benefits package for you and your family

Company Overview

Company H1B Sponsorship