AI Platform Engineer

Sysdig; San Francisco (CA); On-site; USD 141,000 - 177,000; Full time

Benefits offered by this job

Extra days off

401(k) Retirement Savings Plan with a

Maternity and Parental Leave

Mental health support

Full health benefits package

Job summary

Sysdig is hiring in San Francisco for a senior platform/DevOps role focused on building and securing our MCP fleet, agent platform, and Bedrock runtime. You’ll own the deploy patterns, guardrails, and cost-aware governance across AI workloads in a fast-moving cloud security environment.

The role requires hands-on AWS, full-stack capabilities, and experience shipping solutions with LLMs. Strong self-direction and a bias to ship are essential in this collaborative team.

Qualifications

• 6+ years of experience in software engineering, platform engineering, or DevOps with ownership of something in production.
• Hands-on AWS — IAM, ECS or Lambda, CloudWatch, and VPC knowledge.
• Full-stack range including backend services, APIs, and CI/CD with containerized deployments.
• Builders who can write an MCP server or API integration from scratch, not just wiring.
• Hands-on with LLMs, comfortable with LLM APIs, prompt engineering, and agent development.
• Self-directed and capable of handling underspecified tasks.

Responsibilities

• Build and run the MCP fleet — ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and manage the MCP registry.
• Own the agent platform other teams build on — the deploy pattern, guardrails, observability, and hosting substrate that let other teams ship agents without you in the loop.
• Co-own the Bedrock runtime and gateway — model access, cost attribution, content-filtering guardrails, model pinning, and quota management behind an AWS/Okta-SSO'd gateway.
• Make AI spend and usage visible — build the Bedrock-to-Snowflake pipeline, identity-matched, with usage tracking and threshold alerting.
• Make the secure path the easy path — own MDM config, desktop client setup, credentials, and auth flows for non-technical employees; build AI automations across Claude desktop, Slack, and Google Workspace.
• Build governance into the platform — route workflows by data sensitivity, enforce least privilege and auditability, and keep unproven models sandboxed away from production data as configuration.

Skills

6+ years of experience

Self-direction

LLM APIs

Prompt engineering

Experience with production systems

Cloud security familiarity

Tools

AWS

Containerized deployments

CI/CD

Job description

At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.

We created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.

Culture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.

If you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.

What You Will Do

• Build and run the MCP fleet — ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and manage the MCP registry.
• Own the agent platform other teams build on — the deploy pattern, guardrails, observability, and hosting substrate that let other teams ship agents without you in the loop.
• Co-own the Bedrock runtime and gateway — model access, cost attribution, content-filtering guardrails, model pinning, and quota management behind an AWS/Okta-SSO'd gateway.
• Make AI spend and usage visible — build the Bedrock-to-Snowflake pipeline, identity-matched, with usage tracking and threshold alerting.
• Make the secure path the easy path — own MDM config, desktop client setup, credentials, and auth flows for non-technical employees; build AI automations across Claude desktop, Slack, and Google Workspace.
• Build governance into the platform — route workflows by data sensitivity, enforce least privilege and auditability, and keep unproven models sandboxed away from production data as configuration, not a rewrite.

What You Will Bring With You

• 6+ years in software engineering, platform engineering, or DevOps, including ownership of something in production that others depended on.
• Hands-on AWS — IAM, ECS or Lambda, CloudWatch, and working VPC knowledge. Required, not a bonus.
• Full-stack range — backend services, APIs, CI/CD, containerized deployments.
• Builder, not just integrator — you can write an MCP server or API integration from scratch, not just wire up a managed connector.
• Hands-on with LLMs — comfortable with LLM APIs, prompt engineering, and agent development; you've shipped something with them.
• Self-direction — you can take an underspecified task and figure out the parts nobody wrote down.

What We Look For

• Bias to ship — and to automate whatever you just did by hand.
• Ownership of the boring parts — upgrades, credentials, quotas, on-call.
• Candor — you raise problems and disagreements early, even about platform choices.
• Judgment on buy vs. build — you'd rather run a small, coherent stack than a sprawling "perfect" one.

When you join Sysdig, you can expect

• Extra days off to prioritize your well-being
• 401(k) Retirement Savings Plan with a 3% company match
• Maternity and Parental Leave
• Mental health support for you and your family through the Modern Health app
• Full health benefits package for you and your family

The U.S. annual salary range for this full-time position is between 141,000 and 177,000 USD/year. Actual offers may be higher or lower than this range based on a variety of factors, including your work location, job-related experience and education.

Sysdig values a diverse workplace and encourages women, people of color, LGBTQIA+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. Sysdig is an equal-opportunity employer. Sysdig does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, or any other legally protected status.

Sysdig may use responsible AI tools in connection with its recruitment and hiring efforts. These tools may be used to help Sysdig identify and shortlist talent for current and future job postings. You can opt-out of this practice at any time by [email protected] . To learn more about how this works and your rights, please see the Sysdig Global Applicant and Employee Privacy Notice: https://cdn.prod.website-files.com/681a1c8e5b6ebfc0f8529533/683d7a57fc05b32bae08c0f9_sysdig-global-employee-privacy-notice.pdf