platform engineer for AI agent platforms

Enfint; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Enfint ищет опытного инженера DevOps/Cloud для реализации инфраструктуры AWS и управлением EKS. Вы будете проектировать и поддерживать масштабируемые CI/CD пайплайны, внедрять Blue/Green и Canary релизы, а также обеспечивать безопасность и observability в сложной среде.

Требуется опыт работы с Terraform, EKS, GitOps и AWS сервисами, владение английским уровнем не ниже B2. Готовность работать в динамичном фармацевтическом плане проекта приветствуется.

Qualifikationen

• 4+ года практического опыта работы с AWS
• Наличие сертификации AWS Solutions Architect на уровне Associate или Professional
• Сильный практический опыт развёртывания и эксплуатации EKS
• Опыт управления группами узлов, Karpenter и Helm
• Знание RBAC и сетевых политик Kubernetes
• Продвинутые навыки Terraform: модульность, remote state, multi-environment, tfsec/Checkov
• Глубокие знания EKS, ECR, ALB, Route 53, IAM, KMS, Secrets Manager, CloudTrail, GuardDuty, Security Hub и WAF
• Опыт Bedrock, SageMaker, Comprehend; GitOps (ArgoCD/Flux)
• CI/CD pipelines для контейнерных workloads; OIDC federation с GitHub Actions и AWS
• Prometheus, Grafana, OpenTelemetry, X-Ray, CloudWatch Logs Insights
• Понимание Pod Security Standards, Network Policies, admission webhooks, least-privilege
• Дополнительные навыки: Python/Go/Node.js, AWS Cost Explorer и т.д.

Aufgaben

• Проектирование, развёртывание и управление AWS-инфраструктурой через Terraform в рамках Well-Architected Framework
• Оwn и эксплуатирование EKS-кластеров: lifecycle узлов, Karpenter, апдейты add-ons, IRSA, multi-AZ
• Сборка и поддержка CI/CD пайплайнов через GitHub Actions и ArgoCD
• Обеспечение Dev/QA/Production развёртываний в нескольких окружениях
• Реализация Blue/Green и Canary релизов
• Интеграция контроля безопасности через OPA и Kyverno
• Настройка наблюдаемости: AWS Managed Prometheus, Grafana, CloudWatch, X-Ray
• Использование Bedrock, SageMaker, Comprehend для AI-агентов
• Оптимизация затрат: Spot, Savings Plans, Karpenter, scale-to-zero
• Сотрудничество с командами platform/ML для внедрения IA-агентов
• Интеграция MCP, исполнителей и фреймворков; поддержка расширяемости экосистемы

Kenntnisse

AWS

EKS

Terraform

Karpenter

Helm

RBAC

Network policies

OIDC

GitOps

CI/CD

Prometheus

Grafana

OpenTelemetry

X-Ray

CloudWatch

Bedrock

SageMaker

Comprehend

Tools

ArgoCD

Flux

GitHub Actions

Terraform

Helm

Kubernetes

EKS

Jobbeschreibung

Описание:

The project supports initiatives in AWS, AI, and data engineering for a major science and technology company in the pharmaceutical industry, with plans to launch more than 20 additional initiatives.

Задачи:

Design, provision, and manage AWS infrastructure using Terraform in line with the AWS Well-Architected Framework; Own and operate EKS clusters end-to-end, including managed node group lifecycle, Karpenter autoscaling, cluster add-ons upgrades, IRSA configuration, and multi-AZ resilience; Build and maintain automated deployment pipelines with GitHub Actions and ArgoCD; Enable Dev, QA, and Production deployments across multiple environments; Implement Blue/Green and Canary release strategies; Integrate AWS-native security and governance controls; Enforce policy controls using OPA and Kyverno admission controllers; Implement and manage the observability stack with Amazon Managed Prometheus, Amazon Managed Grafana, CloudWatch Container Insights, and AWS X-Ray; Leverage Amazon Bedrock, SageMaker, and Comprehend for AI agent orchestration; Implement cost-efficient architecture practices using Spot Instances, Savings Plans, Karpenter bin-packing, and scheduled scale-to-zero; Partner with platform and ML teams to onboard AI agent workloads; Integrate MCP servers and execution frameworks; Support extensibility of the agent ecosystem.

Требования:

4+ Years of hands-on AWS experience; AWS Solutions Architect certification at Associate or Professional level; Strong hands-on experience with EKS cluster provisioning and operations; Experience with managed node groups, Karpenter, and Helm chart management; Knowledge of Kubernetes RBAC and network policies; Advanced Terraform skills, including modular design, remote state management, multi-environment configuration, and security scanning with Checkov or tfsec; Deep knowledge of EKS, ECR, ALB, Route 53, ACM, IAM, KMS, Secrets Manager, IAM Identity Center, CloudTrail, AWS Config, GuardDuty, Security Hub, and AWS WAF; Practical experience with Amazon Bedrock, SageMaker, and Comprehend; Experience with GitOps tools such as ArgoCD or Flux; Experience building CI/CD pipelines for container workloads; Experience with OIDC federation between GitHub Actions and AWS and EKS OIDC provider integration; Familiarity with Prometheus, Grafana, OpenTelemetry, AWS X-Ray, and CloudWatch Logs Insights; Strong understanding of Pod Security Standards, Network Policies, admission webhooks, and service account least-privilege principles; English at B2 Upper Intermediate level; Nice to have: AWS DevOps Engineer or Security Specialty certification, LangChain or Claude Agent SDK, A2A, MCP, Amazon Bedrock Agents, Knowledge Bases or Guardrails, AWS Fault Injection Service, multi-tenant platform design, Python, Go or Node.js, AWS Cost Explorer, Compute Optimizer, tagging governance, Savings Plan management.

Условия:

No conditions specified