Azure AI platform engineer & architect

CPM Partners, Inc.; United States; Hybrid; USD 150,000 - 230,000; Full time

Job summary

AMCO | CPM Partners ищет специалиста по архитектуре Azure для развертывания и эксплуатации высоконадежной AI платформы в условиях CFO-ориентированной среды. Необходимо проектирование, hands-on реализация и наставничество инженеров в многоуровневой инфраструктуре.

Работа предполагает гибридный формат, с акцентом на безопасность, governance и качественный delivery. Опыт взаимодействия с Foundry, AI-узлами и мониторингом приветствуется.

Qualifications

• Опыт проектирования безопасных production Azure платформ, включая landing zones и управление доступом.
• Глубокие знания VNets, subnets, Firewall, Application Gateway/WAF, Private Endpoints, Private DNS.
• Опыт развёртывания приватных AKS кластеров, конфигурации node pools и безопасности.
• Навыки IaC: Azure DevOps, Pipelines, Git, Bicep, проверка качества и безопасные ворота.
• Понимание архитектуры Foundry и сервисов Azure AI/OpenAI, ретривал-слой.
• Умение работать на стыке дизайна и hands-on реализации, менторинг инженеров.

Responsibilities

• Развернуть производственную Azure AI Platform через инфраструктуру как код и пайплайны выпуска.
• Создать приватную платформу с ограниченным публичным входом и управлением трафиком.
• Реализовать AKS sandbox, runtime для агентов и изоляцию рабочих нагрузок.
• Внедрить безопасный шлюз моделей и интеграцию Foundry без сильной связки к отдельным моделям.
• Обеспечить централизованный мониторинг, безопасность и операционные runbooks.

Skills

Azure архитектура

Kubernetes AKS

DevOps & IaC

Безопасность & соответствие

Облачная инфраструктура

Tools

Azure DevOps

Azure Pipelines

Bicep

Azure Monitor

Azure OpenAI

Job description

Описание:

At AMCO | CPM Partners, we help CFOs and their teams get the best out of technology. Our mission is to optimize and enhance financial processes so finance leaders can make faster and better-informed decisions across consolidation, planning, reporting, and more.

Задачи:

Deploy a production-ready Azure AI Platform through repeatable infrastructure-as-code and environment promotion pipelines. Build a private-by-default platform with controlled public ingress, no public data-plane endpoints, governed egress and end-to-end private DNS resolution. Deliver a secure AKS-based sandbox, build and AI-agent runtime with isolated workloads, autoscaling, container security and clear separation between teams and environments. Implement a model-agnostic AI gateway and Microsoft Foundry integration that enables model choice without tightly coupling agents to individual model deployments. Establish a resilient knowledge layer using Azure AI Search, Azure Cosmos DB and Azure Storage to support vector, semantic and graph-based retrieval patterns. Set up centralised monitoring, tracing, security analytics, policy compliance and operational runbooks to support steady-state operations. Create reusable modules, standards and "paved roads" that help application and AI teams move safely and quickly. Formally hand over the platform, documentation, procedures and knowledge to the IT Cloud team.

Требования:

Azure architecture: Strong experience designing and delivering secure, production Azure platforms, including landing zones, governance, identity and PaaS services. Networking: Deep understanding of Azure VNets, subnets, Azure Firewall, Application Gateway/WAF, API Management, Private Endpoints, Private DNS and hybrid DNS resolution. Kubernetes: Hands-on delivery and operation of private AKS clusters, including node pools, networking, identity, security controls, autoscaling, Helm and container registries. DevOps and IaC: Advanced practical experience with Azure DevOps, Azure Pipelines, Git, Bicep, Azure Verified Modules and automated quality and security gates. Identity and security: Working expertise in Microsoft Entra ID, managed identities, Key Vault and Azure Policy. Observability: Experience implementing Azure Monitor, Log Analytics, Application Insights, diagnostic settings, dashboards and actionable alerting. AI platform services: Practical understanding of Microsoft Foundry, Azure OpenAI, model gateways, agent runtimes, Azure AI Search and retrieval-augmented generation (RAG) platform patterns. Data and integration: Experience with Azure Cosmos DB, Storage, Service Bus, asynchronous workflows and secure service-to-service integration. Leadership and operations: Ability to move between high-level design and hands-on implementation, explain trade-offs, lead reviews and mentor engineers, with a proven record of diagnosing multi-layer production issues and producing clear documentation, runbooks and operational handover. Hands-on ownership: You are comfortable creating the design, writing the code, configuring the platform and resolving implementation issues. Security by design: You default to least privilege, private connectivity, automation, traceability and evidence-based exceptions. Systems thinking and pragmatism: You understand how network, identity, compute, applications, models, data and operations interact end to end, and make decisions teams can implement and support. Clear communication: You explain complex technical trade-offs to engineering, security, product and leadership audiences. Engineering discipline: You value reusable modules, peer review, automated testing, documentation and measurable operational readiness. Будет плюсом: Microsoft certifications, such as Azure Solutions Architect Expert, Azure Network Engineer Associate, DevOps Engineer Expert, Azure Security Engineer Associate or Azure Administrator Associate; Experience with Cilium, Kubernetes NetworkPolicy, KEDA, container vulnerability management, admission controls and supply-chain security; Experience designing resilient API gateways, model-routing layers or shared AI platform services; Familiarity with graph-RAG patterns, vector indexing, semantic search, AI security risks and responsible AI controls; Experience operating regulated, confidential or high-assurance cloud environments; Scripting or software-engineering capability in PowerShell, Azure CLI, Bash, Python, .NET or TypeScript to support automation and integration work

Условия:

We work in a CFO-facing environment where quality, accountability, and integrity are non-negotiable. We aim to do the right thing for clients and for each other. We support flexibility where the role and client commitments allow it, including hybrid working and practical solutions that help balance performance with personal life. We are committed to an inclusive workplace where people feel respected and can be themselves. Different backgrounds, perspectives, and ways of thinking make us stronger.