Cloud Platform Engineer (Agentic Ai)
Luxoft Spain
Hace 12 días
Generador de candidaturas
Una candidatura completa en un minuto: currículum y carta de presentación adaptados, listos para enviar.
Supera los filtros ATS
Descripción de la vacante
Luxoft Spain is seeking a Cloud Engineer to lead design, deployment, and operations of an AWS-based AI agent orchestration platform. You will manage a Kubernetes-native system with EKS clusters, Karpenter autoscaling, and IRSA configuration, delivering scalable workloads across dev, QA, and prod.
The role emphasizes Terraform IaC, GitHub Actions, ArgoCD, and secure, compliant engineering practices, including cost optimization and multi-AZ resilience.
Formación
- 4+ years of hands-on AWS experience.
- AWS Solutions Architect certification (Associate or Professional) is required; DevOps Engineer or Security Specialty preferred.
- Hands-on experience with EKS provisioning and operations, managed node groups, and Karpenter.
- Deep knowledge of IAM, KMS, Secrets Manager, and network policies.
- Experience with Terraform remote state, security scanning, and IaC.
- Familiarity with GitOps tools (ArgoCD or Flux) and CI/CD pipelines for container workloads.
Responsabilidades
- Design, provision, and manage AWS infrastructure using Terraform.
- Operate a Kubernetes-native, enterprise-grade AI agent orchestration platform on AWS.
- Implement Canary releases, security controls, and compliant governance.
- Build and maintain automated deployment pipelines using GitHub Actions and ArgoCD.
- Ensure observability with CloudWatch, Managed Prometheus, Grafana, and OpenTelemetry.
Conocimientos
AWS expertise
EKS
Terraform
Kubernetes
GitOps
ArgoCD
SageMaker
Security & IAM
CI/CD
OpenTelemetry
Herramientas
Terraform Cloud
GitHub Actions
Karpenter
Prometheus/Grafana
Descripción del empleo
The project is for one of the world's famous science and technology companies in pharmaceutical industry, supporting initiatives in AWS, AI and data engineering, with plans to launch over 20 additional initiatives in the future.
We are seeking a highly skilled Cloud Engineer to lead the infrastructure design, deployment, and operations of the AI agent orchestration platform on AWS. This role is responsible for building and managing a Kubernetes-native, enterprise-grade platform that supports scalable AI agent workloads across development, QA, and production environments.
Responsibilities
- Design, provision, and manage AWS infrastructure using Terraform, aligned with the AWS Well-Architected Framework.
Core services include:
- Amazon EKS
- VPC
- IAM
- Route 53
- Own and operate EKS clusters end-to-end
- Managed node group lifecycle management:
- Karpenter-based autoscaling
- Cluster add-on lifecycle upgrades
- IRSA (IAM Roles for Service Accounts) configuration
- Multi-AZ high availability and resilience
- CI/CD & GitOps
- Build and maintain automated deployment pipelines using:
- GitHub Actions
- ArgoCD (GitOps)
- Implement release strategies:
- Canary releases
- Security & Compliance
- Integrate AWS-native security and governance controls:
- AWS WAF
- GuardDuty
- Security Hub
- KMS (encryption)
- Secrets Manager
- External Secrets Operator
- Enforce policy controls using:
- Observability & Monitoring
- Implement and manage observability stack:
- Amazon Managed Prometheus
- Amazon Managed Grafana
- CloudWatch Container Insights
- AWS X‑Ray (distributed tracing)
- AI/ML Integration
- Leverage AWS AI/ML services to support agent orchestration:
- Cost Optimization (FinOps)
- Spot Instances
- Savings Plans
- Karpenter bin‑packing strategies
- Scheduled scale‑to‑zero for non‑production environments
- Platform & Engineering Collaboration
- Partner with platform and ML teams to:
- Integrate MCP servers and execution frameworks
- Support extensibility of the agent ecosystem
Skills
Must have
- 4+ years of hands‑on AWS experience
- AWS Certifications:
- Required: AWS Solutions Architect (Associate or Professional)
- Preferred: DevOps Engineer, Security Specialty Kubernetes & EKS Expertise
- Strong hands‑on experience with:
- EKS cluster provisioning and operations
- Managed node groups and Karpenter
- Kubernetes RBAC and network policies Infrastructure as Code (Terraform)
- Advanced Terraform capabilities:
- Remote state management (S3 + DynamoDB)
- Security scanning (Checkov, tfsec) AWS Services Proficiency
- Deep knowledge of:
- EKS, ECR, ALB, Route 53, ACM
- IAM, KMS, Secrets Manager
- IAM Identity Center
- CloudTrail, AWS Config
- GuardDuty, Security Hub, AWS WAF AI/ML Exposure
- Practical experience with:
- SageMaker (model deployment and endpoints)
- Comprehend (NLP and PII detection) DevOps & Identity
- Experience with:
- GitOps tools (ArgoCD or Flux)
- CI/CD pipelines for container workloads
- GitHub Actions → AWS
- EKS OIDC provider integration Observability & Debugging
- Familiarity with:
- OpenTelemetry
- AWS X‑Ray
- Strong understanding of:
- Pod Security Standards
- Admission webhooks
- Service account least‑privilege principles
Nice to have
- Experience with AI agent frameworks:
- LangChain, Claude Agent SDK, or similar
- Knowledge of emerging protocols:
- A2A (Agent‑to‑Agent)
- Familiarity with:
- Amazon Bedrock Agents, Knowledge Bases, Guardrails
- Namespace isolation
- Programming/debugging skills:
- Python, Go, or Node.js
- AWS Cost Explorer
Languages
- GKE
- AlloyDB
Hoy
The project is for one of the world's famous science and technology companies in pharmaceutical industry, supporting initiatives in AWS, AI and data engineering, with plans to launch over 20 additional initiatives in the future.
We are seeking a highly skilled Cloud Engineer to lead the infrastructure design, deployment, and operations of the AI agent orchestration platform on AWS. This role is responsible for building and managing a Kubernetes-native, enterprise-grade platform that supports scalable AI agent workloads across development, QA, and production environments.
Responsibilities
- Design, provision, and manage AWS infrastructure using Terraform, aligned with the AWS Well-Architected Framework.
Core services include:
- Amazon EKS
- VPC
- IAM
- Route 53
- Own and operate EKS clusters end-to‑end
- Managed node group lifecycle management:
- Karpenter-based autoscaling
- Cluster add‑on lifecycle upgrades
- IRSA (IAM Roles for Service Accounts) configuration
- Multi‑AZ high availability and resilience
- CI/CD & GitOps
- Build and maintain automated deployment pipelines using:
- GitHub Actions
- ArgoCD (GitOps)
- Implement release strategies:
- Canary releases
- Security & Compliance
- Integrate AWS-native security and governance controls:
- AWS WAF
- GuardDuty
- Security Hub
- KMS (encryption)
- Secrets Manager
- External Secrets Operator
- Enforce policy controls using:
- Observability & Monitoring
- Implement and manage observability stack:
- Amazon Managed Prometheus
- Amazon Managed Grafana
- CloudWatch Container Insights
- AWS X‑Ray (distributed tracing)
- AI/ML Integration
- Leverage AWS AI/ML services to support agent orchestration:
- Cost Optimization (FinOps)
- Spot Instances
- Savings Plans
- Karpenter bin‑packing strategies
- Scheduled scale‑to‑zero for non‑production environments
- Platform & Engineering Collaboration
- Partner with platform and ML teams to:
- Integrate MCP servers and execution frameworks
- Support extensibility of the agent ecosystem
Skills
Must have
- 4+ years of hands‑on AWS experience
- AWS Certifications:
- Required: AWS Solutions Architect (Associate or Professional)
- Preferred: DevOps Engineer, Security Specialty Kubernetes & EKS Expertise
- Strong hands‑on experience with:
- EKS cluster provisioning and operations
- Managed node groups and Karpenter
- Kubernetes RBAC and network policies Infrastructure as Code (Terraform)
- Advanced Terraform capabilities:
- Remote state management (S3 + DynamoDB)
- Security scanning (Checkov, tfsec) AWS Services Proficiency
- Deep knowledge of:
- EKS, ECR, ALB, Route 53, ACM
- IAM, KMS, Secrets Manager
- IAM Identity Center
- CloudTrail, AWS Config
- GuardDuty, Security Hub, AWS WAF AI/ML Exposure
- Practical experience with:
- SageMaker (model deployment and endpoints)
- Comprehend (NLP and PII detection) DevOps & Identity
- Experience with:
- GitOps tools (ArgoCD or Flux)
- CI/CD pipelines for container workloads
- GitHub Actions → AWS
- EKS OIDC provider integration Observability & Debugging
- Familiarity with:
- OpenTelemetry
- AWS X‑Ray
- Strong understanding of:
- Pod Security Standards
- Admission webhooks
- Service account least‑privilege principles
Nice to have
- Experience with AI agent frameworks:
- LangChain, Claude Agent SDK, or similar
- Knowledge of emerging protocols:
- A2A (Agent‑to‑Agent)
- Familiarity with:
- Amazon Bedrock Agents, Knowledge Bases, Guardrails
- Namespace isolation
- Programming/debugging skills:
- Python, Go, or Node.js
- AWS Cost Explorer
Languages
- GKE
- AlloyDB
Hoy
The project is for one of the world's famous science and technology companies in pharmaceutical industry, supporting initiatives in AWS, AI and data engineering, with plans to launch over 20 additional initiatives in the future.
We are seeking a highly skilled Cloud Engineer to lead the infrastructure design, deployment, and operations of the AI agent orchestration platform on AWS. This role is responsible for building and managing a Kubernetes-native, enterprise-grade platform that supports scalable AI agent workloads across development, QA, and production environments.
Responsibilities
- Design, provision, and manage AWS infrastructure using Terraform, aligned with the AWS Well-Architected Framework.
Core services include:
- Amazon EKS
- VPC
- IAM
- Route 53
- Own and operate EKS clusters end-to‑end
- Managed node group lifecycle management:
- Karpenter-based autoscaling
- Cluster add‑on lifecycle upgrades
- IRSA (IAM Roles for Service Accounts) configuration
- Multi‑AZ high availability and resilience
- CI/CD & GitOps
- Build and maintain automated deployment pipelines using:
- GitHub Actions
- ArgoCD (GitOps)
- Implement release strategies:
- Canary releases
- Security & Compliance
- Integrate AWS-native security and governance controls:
- AWS WAF
- GuardDuty
- Security Hub
- KMS (encryption)
- Secrets Manager
- External Secrets Operator
- Enforce policy controls using:
- Observability & Monitoring
- Implement and manage observability stack:
- Amazon Managed Prometheus
- Amazon Managed Grafana
- CloudWatch Container Insights
- AWS X‑Ray (distributed tracing)
- AI/ML Integration
- Leverage AWS AI/ML services to support agent orchestration:
- Cost Optimization (FinOps)
- Spot Instances
- Savings Plans
- Karpenter bin‑packing strategies
- Scheduled scale‑to‑zero for non‑production environments
- Platform & Engineering Collaboration
- Partner with platform and ML teams to:
- Integrate MCP servers and execution frameworks
- Support extensibility of the agent ecosystem
Skills
Must have
- 4+ years of hands‑on AWS experience
- AWS Certifications:
- Required: AWS Solutions Architect (Associate or Professional)
- Preferred: DevOps Engineer, Security Specialty Kubernetes & EKS Expertise
- Strong hands‑on experience with:
- EKS cluster provisioning and operations
- Managed node groups and Karpenter
- Kubernetes RBAC and network policies Infrastructure as Code (Terraform)
- Advanced Terraform capabilities:
- Remote state management (S3 + DynamoDB)
- Security scanning (Checkov, tfsec) AWS Services Proficiency
- Deep knowledge of:
- EKS, ECR, ALB, Route 53, ACM
- IAM, KMS, Secrets Manager
- IAM Identity Center
- CloudTrail, AWS Config
- GuardDuty, Security Hub, AWS WAF AI/ML Exposure
- Practical experience with:
- SageMaker (model deployment and endpoints)
- Comprehend (NLP and PII detection) DevOps & Identity
- Experience with:
- GitOps tools (ArgoCD or Flux)
- CI/CD pipelines for container workloads
- GitHub Actions → AWS
- EKS OIDC provider integration Observability & Debugging
- Familiarity with:
- OpenTelemetry
- AWS X‑Ray
- Strong understanding of:
- Pod Security Standards
- Admission webhooks
- Service account least‑privilege principles
Nice to have
- Experience with AI agent frameworks:
- LangChain, Claude Agent SDK, or similar
- Knowledge of emerging protocols:
- A2A (Agent‑to‑Agent)
- Familiarity with:
- Amazon Bedrock Agents, Knowledge Bases, Guardrails
- Namespace isolation
- Programming/debugging skills:
- Python, Go, or Node.js
- AWS Cost Explorer
Languages
- GKE
- AlloyDB
Hoy
- GKE
- AlloyDB
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
