AI Cloud Platform Engineer

Kforce Inc; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Kforce is seeking an AI Cloud Platform Engineer in Miami, FL to design, build, and operate MCP services that securely connect AI agents to enterprise data sources and Microsoft 365 ecosystems.

The role requires deep AWS experience, and hands-on work with OpenAI/Anthropic models in production, with a strong security, governance, and collaboration focus across teams.

Qualifications

• 10+ years in software, cloud, or platform engineering.
• 5+ years designing and operating production cloud services.
• Strong AWS IAM, networking, APIs, containers, serverless, observability, secrets mgmt.
• Experience with APIs, MCP servers, OAuth2/OpenID Connect.
• Hands-on with Microsoft Graph, OneDrive, SharePoint, Entra ID.
• Experience integrating OpenAI, Anthropic in production.
• Proficiency in Python, TS, or JavaScript; strong test/troubleshoot.
• Terraform, Git-based development, and CI/CD (GitHub Actions/CircleCI).
• Secure software delivery, identity governance, AI security practices.
• Excellent cross-team communication.

Responsibilities

• Design, develop, and maintain MCP services connecting AI agents to data sources.
• Integrate with Microsoft Graph, Entra ID, SharePoint with least-privilege access.
• Implement secure content discovery, metadata management, and permissions-aware access.
• Build reusable AI runtime and gateway services on AWS with observability and controls.
• Develop scalable auth, policy, telemetry, and lifecycle patterns.
• Integrate OpenAI, Anthropic, and other LLM platforms with enterprise apps.
• Collaborate with security teams to enforce AI security controls and auditing.
• Create reference architectures, templates, and documentation.
• Support enterprise adoption of AI-assisted development tools.

Skills

AWS expertise

Microsoft Graph integration

Python/TypeScript/JavaScript

CI/CD tooling

Terraform

GitHub Actions

Security & governance

OpenAI/Anthropic integration

OAuth 2.0 / OpenID Connect

Cross-team collaboration

Tools

Terraform

GitHub

CircleCI

API Gateway

AWS services

Job description

Responsibilities

Kforce has a client seeking an AI Cloud Platform Engineer in Miami, FL. Key Responsibilities: AI Platform & MCP Services:

• Design, develop, and maintain Model Context Protocol (MCP) services that securely connect AI agents to OneDrive, SharePoint, and enterprise data sources
• Integrate with Microsoft Graph, Entra ID, and Microsoft 365 permissions while enforcing least-privilege access, auditing, and governance controls
• Implement secure content discovery, retrieval, metadata management, and permissions-aware access patterns

Agent Runtime & AI Infrastructure

• Build reusable AI runtime and gateway services on AWS, supporting identity, memory, tool access, observability, and operational controls
• Develop scalable patterns for authentication, authorization, policy enforcement, telemetry, and lifecycle management
• Integrate OpenAI, Anthropic, and other LLM platforms with enterprise applications and workflows

AI Security & Governance

• Partner with cybersecurity teams to implement AI security controls, including access boundaries, secrets management, audit logging, monitoring, and data protection
• Evaluate and mitigate risks such as prompt injection, excessive permissions, unauthorized data exposure, and unsafe agent actions
• Contribute to deployment automation and operational support for AI security solutions

AI Enablement & Developer Experience

• Guide teams in adopting agentic AI, retrieval systems, tool integrations, and model selection strategies
• Create reference architectures, templates, documentation, and reusable implementation patterns
• Support enterprise adoption of AI-assisted development tools such as Claude Code, Codex, and Cursor

DevOps & Platform Engineering

• Build developer platforms that streamline source control, CI/CD, testing, infrastructure provisioning, and deployment processes
• Enhance Infrastructure-as-Code and automation practices using Terraform and modern cloud-native tooling

Requirements

• 10+ years of software engineering, cloud engineering, or platform engineering experience
• 5+ years of designing, deploying, and operating production cloud services
• Strong AWS expertise, including IAM, networking, APIs, containers, serverless technologies, observability, and secrets management
• Experience building APIs, integrations, MCP servers, and enterprise data access solutions using OAuth 2.0 and OpenID Connect
• Hands-on experience with Microsoft Graph, OneDrive, SharePoint, and Microsoft Entra ID
• Experience integrating and operating OpenAI, Anthropic, or similar LLM platforms in production environments
• Proficiency in Python, TypeScript, or JavaScript with strong testing, troubleshooting, and code review practices
• Experience with Terraform, Git-based development, and CI/CD tools such as GitHub Actions or CircleCI
• Strong understanding of secure software delivery, identity management, governance, and AI security best practices
• Excellent communication skills with the ability to collaborate across architecture, security, and development teams

Preferred Qualifications

• Experience with Amazon Bedrock AgentCore, including Gateway, Runtime, Identity, Memory, or Observability capabilities
• Knowledge of Microsoft 365 governance, SharePoint permissions, and delegated consent models
• Experience with Kubernetes, ECS, API Gateway, Lambda, CloudWatch, and cloud cost optimization
• Background enabling enterprise developer platforms, security tooling integrations, and AI-assisted software development practices

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.