DevSecOps Engineer - Secure AI Agent Platform

Upstaff LTD; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Upstaff LTD in the United States seeks a DevSecOps Engineer to architect and secure a high-security infrastructure for an enterprise-grade Agent Development Platform. You will ensure strict isolation, zero-trust connectivity, and robust data protection for autonomous agents.

Responsibilities include implementing Firecracker MicroVMs for isolated runtimes, managing PostgreSQL, ChromaDB/PGVector, and Neo4j, and designing event-driven pipelines with AWS SQS, EventBridge, and Kafka.

Qualifications

• Experience designing secure AWS production environments.
• Experience with Firecracker MicroVMs for isolated runtimes.
• Background managing multi-layered data infrastructures (SQL/NoSQL) for AI-driven apps.
• Knowledge of SOC 2 and ISO 27001 compliance readiness.
• Experience with zero-trust security models and network hardening.

Responsibilities

• Agent sandboxing & isolation using Firecracker MicroVMs.
• Secure data infrastructure with PostgreSQL, ChromaDB/PGVector, Neo4j.
• Design and manage event streaming with SQS, EventBridge, Kafka.
• Automate IAM and infrastructure with IaC for AWS/Kubernetes.
• Enforce zero-trust security and multi-tenancy controls.

Skills

AWS security

Firecracker VM

Kubernetes security

Data stack design

Event-driven design

Python scripting

Bash scripting

Zero-trust

Identity integration

IaC automation

Security governance

Tools

PostgreSQL

ChromaDB/PGVector

Neo4j

AWS SQS/EventBridge

Kafka

Temporal

Kubernetes

Docker

Job description

Upstaff LTD in the United States seeks a DevSecOps Engineer to architect and secure a high-security infrastructure for an enterprise-grade Agent Development Platform. You will ensure strict isolation, zero-trust connectivity, and robust data protection for autonomous agents.

Responsibilities include implementing Firecracker MicroVMs for isolated runtimes, managing PostgreSQL, ChromaDB/PGVector, and Neo4j, and designing event-driven pipelines with AWS SQS, EventBridge, and Kafka.