AI Platform Engineer - Cloud Security & Platform

Sysdig; United States; Remote; USD 123,000 - 154,000; Full time

Benefits offered by this job

401(k) Retirement Savings Plan with a

Job summary

Sysdig is seeking an experienced engineer to build and operate the MCP fleet, ship, secure, and patch self-hosted and managed servers for business apps and databases, and manage the MCP registry.

You will own the agent platform and Bedrock runtime, defining deploy patterns and guardrails that let other teams ship agents without direct involvement. The role requires 6+ years in software/DevOps, hands-on AWS, full-stack capabilities, and LLMS experience. Self-direction is essential.

Qualifications

• 6+ years in software engineering, platform engineering, or DevOps.
• Hands-on AWS experience: IAM, ECS or Lambda, CloudWatch, and VPC.
• Full-stack range: backend services, APIs, CI/CD, containerized deployments.
• Builder, not just integrator: you can write an MCP server or API integration from scratch.
• Hands-on with LLMs: comfortable with LLM APIs, prompt engineering, and agent development; you've shipped something with them.
• Self-direction: you can take an underspecified task and figure out the parts nobody wrote down.

Responsibilities

• Build and run the MCP fleet - ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and manage the MCP registry.
• Own the agent platform other teams build on - the deploy pattern, guardrails, observability, and hosting substrate that let other teams ship agents without you in the loop.
• Co-own the Bedrock runtime and gateway - model access, cost attribution, content-filtering guardrails, model pinning, and quota management behind an AWS/Okta-SSO'd gateway.
• Make AI spend and usage visible - build the Bedrock-to-Snowflake pipeline, identity-matched, with usage tracking and threshold alerting.
• Make the secure path the easy path - own MDM config, desktop client setup, credentials, and auth flows for non-technical employees; build AI automations across Claude desktop, Slack, and Google Workspace.

Skills

AWS IAM

AWS ECS

AWS Lambda

CloudWatch

VPC

Full-stack development

LLMs experience

Self-direction

Production ownership

Tools

CI/CD

Docker

Job description

Sysdig is seeking an experienced engineer to build and operate the MCP fleet, ship, secure, and patch self-hosted and managed servers for business apps and databases, and manage the MCP registry.

You will own the agent platform and Bedrock runtime, defining deploy patterns and guardrails that let other teams ship agents without direct involvement. The role requires 6+ years in software/DevOps, hands-on AWS, full-stack capabilities, and LLMS experience. Self-direction is essential.