Founding Platform & Infrastructure Engineer, AI Platform Hybrid (San Francisco, CA)

Dover; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Nth AI is building Nexus, an AI-native implementation platform. You will own the infrastructure layer that enables secure and reliable deployment inside complex enterprise Azure environments.

You’ll design and build infrastructure, deployment architecture, automation, security controls, and operational systems to make Nexus repeatable across customers. You’ll work with product engineers and enterprise teams to standardize deployment patterns.

Qualifications

• Deep Azure infrastructure experience with production deployments.
• Hands-on with Bicep, Terraform, ARM or equivalent IaC tooling.
• Production platform engineering experience.
• Fluency in Entra ID, Key Vault, RBAC and private networking.
• Proficient in Python/TypeScript/PowerShell/Bash for automation.
• Strong architectural judgement balancing security, reliability, velocity and cost.
• Experience working with enterprise customers.

Responsibilities

• Design Azure deployment architecture across subscriptions, networks, and services.
• Build reusable IaC modules for Nexus environments.
• Implement identity and security controls (Entra ID, Key Vault, RBAC).
• Design private networking, connectivity, and secure access to customer systems.
• Build CI/CD and release workflows for reliable deployments.
• Improve platform reliability with logging, metrics, alerts, and health checks.
• Turn custom enterprise deployment requirements into reusable platform capabilities.

Skills

Azure infra

IaC tooling

CI/CD pipelines

Security & IAM

Observability

Python/TypeScript

Tools

Bicep

Terraform

ARM templates

Job description

Build the infrastructure that deploys enterprise AI.

Nth AI is building Nexus, an AI-native implementation platform that creates the trusted data, semantic models, and governed business context enterprise AI needs to operate.

You will own the platform and infrastructure layer that allows Nexus to deploy securely and reliably inside complex enterprise Azure environments.

This is not a traditional DevOps role. You will design and build the infrastructure, deployment architecture, automation, security controls, and operational systems that make Nexus repeatable across customers.

You’ll work directly with product engineers and enterprise customer teams to turn complex Azure environments into standardized, secure deployment patterns that become part of the Nexus product itself.

What you’ll build

• Azure deployment architecture: Design the infrastructure patterns Nexus uses to deploy into customer Azure environments across subscriptions, resource groups, networks, identities, and services.

• Infrastructure as code: Build reusable Bicep and/or Terraform modules for repeatable provisioning, configuration, upgrades, and teardown of Nexus environments.

• Identity and security: Implement Microsoft Entra ID, managed identities, service principals, RBAC, Key Vault, secrets management, least-privilege access, and secure cross-service authentication.

• Networking and enterprise connectivity: Design private networking, endpoints, DNS, firewall rules, VNets, hybrid connectivity, and secure access to customer systems.

• Deployment automation: Build CI/CD and release workflows that reliably deploy application code, agents, infrastructure, and configuration across development and customer environments.

• Platform reliability and observability: Implement logging, metrics, alerting, health checks, failure recovery, auditability, and operational tooling across Nexus deployments.

• Customer environment automation: Turn one-off enterprise deployment requirements into reusable platform capabilities that can support many customers with minimal manual intervention.

• Production architecture: Partner with engineering to make decisions around containers, compute, storage, scaling, resilience, isolation, and cost across the Nexus platform.

What we’re looking for

• Deep Azure infrastructure experience. You have personally designed, deployed, and operated production systems in Azure and understand subscriptions, networking, identity, security, resource organization, and enterprise governance.

• Strong infrastructure-as-code skills. Hands-on experience with Bicep, Terraform, ARM, or equivalent IaC tooling. You build reusable modules rather than relying on manual portal configuration.

• Production platform engineering ability. You have built deployment systems, CI/CD pipelines, environment automation, observability, and operational tooling used by real production workloads.

• Enterprise security and identity fluency. Strong understanding of Entra ID, managed identities, service principals, RBAC, Key Vault, private networking, secrets, and least-privilege architecture.

• Software engineering ability. Comfortable writing production Python, TypeScript, PowerShell, Bash, or similar code to build automation, internal tooling, APIs, and platform services.

• Strong architectural judgment. You can make pragmatic tradeoffs across security, reliability, developer velocity, scalability, and cost, and can explain those tradeoffs clearly.

• Enterprise customer experience. You can work directly with customer cloud, security, and infrastructure teams to navigate real-world constraints and get production deployments live.

Bonus points

Experience with Microsoft Fabric, Azure AI Foundry, Azure Container Apps, AKS, Azure Container Registry, Azure Monitor, Application Insights, Defender for Cloud, Azure Policy, Private Link, or Azure DevOps/GitHub Actions.

Experience building multi-tenant or customer-isolated SaaS infrastructure, particularly software deployed into customer-owned cloud environments.

Experience with enterprise landing zones, regulated environments, hybrid networking, or environments where infrastructure must comply with strict customer security and governance requirements.

What success looks like

Within your first months, you will help turn Nexus deployment from an environment-specific engineering exercise into a repeatable software capability.

A new enterprise deployment should increasingly become something Nexus can provision, configure, secure, validate, monitor, and upgrade through automation rather than manual infrastructure work.