Enterprise AI Systems Engineer

Juul Labs; Washington (District of Columbia); On-site; USD 150,000 - 187,000; Full time

Benefits offered by this job

Equity and performance bonuses

401(k) with company matching

Cell phone subsidy & commuter benefits

Excellent medical, dental and vision

Job summary

Juul Labs is seeking an experienced engineer to own AI platforms end to end, administering enterprise tenants, and building content and workflows. You will drive adoption among 250+ users, monitor usage, and ensure security and governance across MCP/LLM gateways.

Strong Python and TypeScript skills, plus cloud architecture in AWS and GCP, are required. The role emphasizes cost control, vendor model selection, and scalable integrations while operating within a fast‑paced, compliant environment.

Qualifications

• 5+ years in software, cloud, or platform engineering, including recent hands-on work building and running LLM-based systems.
• Experience administering an enterprise SaaS or AI tenant at scale: access management, configuration, cost control, and adoption.
• Working knowledge of both commercial and open-weight LLMs, including prompt engineering, evaluation, retrieval, and agentic patterns.

Responsibilities

• Own the platforms end to end; build and run AI workloads and ensure cost, performance, and security telemetry.
• Administer enterprise tenants: provisioning, groups, roles, workspace configuration, and security settings.
• Build content: skills, prompts, projects, connectors, and documentation; drive adoption across users.

Skills

LLM platforms

AWS

GCP

GitHub

Python

TypeScript

CI/CD

IaC

Security

Data governance

Communication to execs

Education

Bachelor's degree or relevant experience

Tools

Bedrock

Vertex AI

OpenRouter

MCP gateways

Job description

Juul Labs's mission is to transition the world’s billion adult smokers away from combustible cigarettes, eliminate their use, and combat underage usage of our products. We have the opportunity to address one of the world’s most intractable challenges through a commitment to exceptional quality, research, design, and innovation. Backed by leading technology investors, we are committed to the same excellence when it comes to hiring great talent.

We are a diverse team that is united by this common purpose and we are hiring the world’s best engineers, scientists, designers, product managers, operations experts, and customer service and business professionals. If the opportunity to build your career is compelling, read on for more details.

ROLE AND RESPONSIBILITIES:

• You own these platforms end to end. What you build gets used across the whole company, and you decide how AI runs here rather than inheriting someone else's design.
• Administer our enterprise Claude, Gemini, OpenRouter, Cursor and NotebookLM tenants. User provisioning, groups and roles, workspace configuration, and tenant security settings.
• Build and maintain the content that makes those platforms useful: skills, prompts, projects, connectors, and the documentation behind them. Drive adoption across 250 users and growing.
• Track consumption and spend across all three platforms. Report on usage, find idle seats, and support the business-unit chargeback model.
• Keep the platforms running. Availability monitoring, feature rollouts, user issue triage, and escalation ownership when something breaks.
• Build and operate the MCP servers and gateways that connect these platforms to internal systems, with least-privilege access and full audit logging.
• Run the LLM gateway that centralizes routing, authentication, rate limiting, logging, and policy enforcement across model providers.
• Choose the right model for each workload, commercial or open-weight, based on cost, latency, capability, and how sensitive the data is.
• Build agentic workflows and automations against internal APIs and tools, with the evaluation and guardrails to keep them predictable.
• Architect and run AI workloads on AWS and GCP: compute, networking, IAM, secrets management, private connectivity, Bedrock, and Vertex AI.
• Own the code in GitHub and write most of it yourself, mostly Python and TypeScript. Branch protection, access control, secret scanning, and Actions pipelines.
• Instrument the stack for cost, performance, and security telemetry, and build the reporting that leadership and finance rely on.
• Enforce data handling, retention, and access policy alongside Cybersecurity and AI Governance, and write the runbooks and standards behind it.
• Perform related duties as assigned, within your scope of practice

PERSONAL AND PROFESSIONAL QUALIFICATIONS:

• 5+ years in software, cloud, or platform engineering, including recent hands-on work building and running LLM-based systems.
• Experience administering an enterprise SaaS or AI tenant at scale: access management, configuration, cost control, and adoption.
• Working knowledge of both commercial and open-weight LLMs, including prompt engineering, evaluation, retrieval, and agentic patterns.
• Hands-on with Model Context Protocol (MCP), MCP gateways, or LLM gateways. Comparable API integration and middleware experience counts.
• AWS and GCP architecture, including IAM, networking, secrets management, and managed AI services.
• GitHub and standard engineering discipline: version control, code review, testing, CI/CD, and infrastructure as code.
• Security and data governance fundamentals applied to AI work: least privilege, data classification, DLP, and auditability.
• Able to explain technical work to executives, finance, and people who do not work in technology.
• Nice to have: Vertex AI or Amazon Bedrock, self-hosted open-weight model deployment, vector databases and RAG pipelines, Splunk or another SIEM, and cloud cost management.

EDUCATION:

• Preferred, bachelor degree in applicable field or relevant work experience

JUUL LABS PERKS & BENEFITS:

• A place to grow your career. We’ll help you set big goals - and exceed them
• People. Work with talented, committed and supportive teammates
• Equity and performance bonuses. Every employee is a stakeholder in our success
• Cell phone subsidy, commuter benefits and discounts on JUUL products
• Excellent medical, dental and vision, disability, and life insurance, plus family support, wellness, legal, and employee assistance program benefits
• 401(k) plan with company matching
• Plus biannual discretionary performance bonuses

THE COMPANY:

Juul Labs's mission is to transition the world’s billion adult smokers away from combustible cigarettes, eliminate their use, and combat underage usage of our products. We have the opportunity to address one of the world’s most intractable challenges through a commitment to exceptional quality, research, design, and innovation. Backed by leading technology investors, we are committed to the same excellence when it comes to hiring great talent.

We are a diverse team that is united by this common purpose and we are hiring the world’s best engineers, scientists, designers, product managers, operations experts, and customer service and business professionals. If the opportunity to build your career is compelling, read on for more details.

ROLE AND RESPONSIBILITIES:

• You own these platforms end to end. What you build gets used across the whole company, and you decide how AI runs here rather than inheriting someone else's design.
• Administer our enterprise Claude, Gemini, OpenRouter, Cursor and NotebookLM tenants. User provisioning, groups and roles, workspace configuration, and tenant security settings.
• Build and maintain the content that makes those platforms useful: skills, prompts, projects, connectors, and the documentation behind them. Drive adoption across 250 users and growing.
• Track consumption and spend across all three platforms. Report on usage, find idle seats, and support the business‑unit chargeback model.
• Keep the platforms running. Availability monitoring, feature rollouts, user issue triage, and escalation ownership when something breaks.
• Build and operate the MCP servers and gateways that connect these platforms to internal systems, with least‑privilege access and full audit logging.
• Run the LLM gateway that centralizes routing, authentication, rate limiting, logging, and policy enforcement across model providers.
• Choose the right model for each workload, commercial or open‑weight, based on cost, latency, capability, and how sensitive the data is.
• Build agentic workflows and automations against internal APIs and tools, with the evaluation and guardrails to keep them predictable.
• Architect and run AI workloads on AWS and GCP: compute, networking, IAM, secrets management, private connectivity, Bedrock, and Vertex AI.
• Own the code in GitHub and write most of it yourself, mostly Python and TypeScript. Branch protection, access control, secret scanning, and Actions pipelines.
• Instrument the stack for cost, performance, and security telemetry, and build the reporting that leadership and finance rely on.
• Enforce data handling, retention, and access policy alongside Cybersecurity and AI Governance, and write the runbooks and standards behind it.
• Perform related duties as assigned, within your scope of practice

PERSONAL AND PROFESSIONAL QUALIFICATIONS:

• 5+ years in software, cloud, or platform engineering, including recent hands-on work building and running LLM-based systems.
• Experience administering an enterprise SaaS or AI tenant at scale: access management, configuration, cost control, and adoption.
• Working knowledge of both commercial and open-weight LLMs, including prompt engineering, evaluation, retrieval, and agentic patterns.
• Hands-on with Model Context Protocol (MCP), MCP gateways, or LLM gateways. Comparable API integration and middleware experience counts.
• AWS and GCP architecture, including IAM, networking, secrets management, and managed AI services.
• GitHub and standard engineering discipline: version control, code review, testing, CI/CD, and infrastructure as code.
• Strong Python and/or JavaScript/TypeScript for building integrations, automations, and internal tooling.
• Security and data governance fundamentals applied to AI work: least privilege, data classification, DLP, and auditability.
• Able to explain technical work to executives, finance, and people who do not work in technology.
• Nice to have: Vertex AI or Amazon Bedrock, self‑hosted open‑weight model deployment, vector databases and RAG pipelines, Splunk or another SIEM, and cloud cost management.

EDUCATION:

• Preferred, bachelor degree in applicable field or relevant work experience

JUUL LABS PERKS & BENEFITS:

• A place to grow your career. We’ll help you set big goals - and exceed them
• People. Work with talented, committed and supportive teammates
• Equity and performance bonuses. Every employee is a stakeholder in our success
• Cell phone subsidy, commuter benefits and discounts on JUUL products
• Excellent medical, dental and vision, disability, and life insurance, plus family support, wellness, legal, and employee assistance program benefits
• 401(k) plan with company matching
• Plus biannual discretionary performance bonuses

Juul Labs is proud to be an equal opportunity employer and is committed to creating a diverse and inclusive work environment for all employees and job applicants, without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. We will consider for employment qualified applicants with arrest and conviction records, pursuant to the San Francisco Fair Chance Ordinance. Juul Labs also complies with the employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must have authorization to work for Juul Labs in the US.

SALARY RANGES:Salary varies by role, level and location, and is dependent on the cost of labor in a givengeographic region among other factors. These ranges may be modified at any time.LOCATIONS:Tier 1 Locations: Greater New York City, and San Francisco Bay AreaTier 2 Locations: Greater Boston, Washington DC Metropolitan Area, Seattle/Tacoma,Greater Sacramento, Southern California (Los Angeles/OC/San Diego, Riverside and Imperial counties)Tier 3 Locations: Rest of New England, NY Capital District, Rest of New Jersey, GreaterPhiladelphia, Pittsburgh, Delaware, Rest of Maryland, Rest of Virginia, North Carolina,Atlanta, Miami-Fort Lauderdale-WPB, Chicagoland, Dallas, Houston, Austin,Minneapolis/St. Paul, Colorado, Phoenix, Las Vegas, Reno, Carson City NV., Portland Ore./VancouverWash., Rest of California, HawaiiTier 4 Locations: Rest of US including Alaska and Puerto Rico

Tier 1 Range:: $165,000 USD - $206,000 USD

Tier 2 Range:: $150,000 USD - $187,000 USD

Tier 3 Range:: $141,000 USD - $176,000 USD

Tier 4 Range:: $126,000 USD - $157,000 USD