Platform Engineer (Agent Release)

Netskope; Taguig; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Netskope is seeking seasoned CI/CD and MLOps professionals to own automated gates, canary rollouts, and rollback strategies across release pipelines. You will design thresholds for evaluation scores and ensure safe promotion of model-driven changes into production, minimizing manual intervention.

Ideal candidates have 5+ years in CI/CD or MLOps, strong Python and IaC skills (Terraform, CDK, GitHub Actions, CodePipeline), and experience with Dockerized services in end-to-end pipelines.

Qualifications

• At least 5 years in CI/CD, release engineering, or MLOps, including 1–2 years releasing LLM or agent-based systems.
• Has designed and run progressive rollout strategies (canary, shadow, or blue-green) with automatic rollback.
• Has gated a release on evaluation scores, treating a regression as a hard stop before production.
• Strong Python and infrastructure-as-code skills (Terraform, CDK, GitHub Actions, or CodePipeline).
• Experience building and deploying containerized services with Docker in CI/CD pipelines.

Skills

CI/CD

Python

Terraform

CDK

GitHub Actions

CodePipeline

Canary rollout

Tools

Docker

Job description

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.Visit us atNetskope Careers. Please follow us on LinkedIn and Twitter @Netskope.

Skills and competencies:

• Own and continuously improve the CI/CD pipeline every agent and every model or prompt change moves through, from initial commit through sandbox, development, and staging, before anything reaches production.
• Design and maintain the automated gates that decide whether a release is safe to promote — evaluation score thresholds, security scan results, guardrail test results — so a human isn't manually eyeballing test output before every promotion.
• Own progressive rollout for model and agent changes: canary a change to a small slice of traffic or sessions first, watch the quality and cost metrics live, and only promote to full traffic once those metrics hold.
• Build and maintain the rollback path for every stage of the pipeline, so that a bad release can be reversed in minutes, not hours, and so the trigger conditions for rollback are automatic rather than someone noticing a problem by chance.
• Own model tiering across the agent fleet: routing agents to the model tier that actually fits their task complexity, and adjusting that routing as usage patterns or model pricing change.
• Manage the shadow-period process for newly promoted agents, making sure the right metrics and review checkpoints are actually in place and visible before an agent moves from shadow to fully autonomous operation.
• Run model version regression testing whenever a new model version becomes available, confirming existing agents don't silently degrade before that version gets adopted anywhere in production.
• Partner with the Agent Runtime Engineer on the runtime side of releases to quickly troubleshoot issues in case of a bad rollout.

Must-Have:

• At least 5 years in CI/CD, release engineering, or MLOps, including 1–2 years releasing LLM or agent-based systems specifically.
• Has designed and run a progressive rollout strategy (canary, shadow, or blue-green) for something stateful or model-driven, with automatic rollback triggers built in from the start, not a person noticing a problem and rolling back by hand.
• Has gated a release on evaluation scores before, treating a regression as a hard stop the same way a failed test would, and can design that same kind of check to catch a new model version quietly degrading an existing agent before it touches production.
• Strong Python (or similar) and solid infrastructure-as-code skills. Terraform, CDK, GitHub Actions, or CodePipeline all count.
• Comfortable building and deploying containerized services with Docker, and owning their release path through CI/CD end to end.

Strong Advantage:

• Direct experience with AWS Bedrock, or something comparable, including its deployment and versioning quirks.
• Has made model tiering or cost-routing decisions — matched task complexity to model cost instead of defaulting everyone to the priciest option.
• Worked somewhere release pipelines needed to produce evidence for an audit, not just pass internally.
• Can explain the difference between traditional CI/CD (pass or fail) and AI release gating (thresholds and probability) to someone who's only worked in the former. That gap trips people up more than it should.

#LI-CV1

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer toNetskope's Privacy Policyfor more details.