IT Operations & AI Agent Engineer (US-Based)

Ambi; San Francisco (CA); Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

Remote-friendly

Job summary

Ambi is hiring an IT Operations & AI Agent Engineer (US-Based) to own the US production boundary and build AI Agent tooling for the China team to operate without direct access while keeping data within US borders.

Responsibilities include managing US infrastructure, implementing guardrails, encryption and access controls, and coordinating with legal to meet CCAP requirements. This role supports remote collaboration across time zones with a China-based team.

Qualifications

• Experience in DevOps/SRE or infrastructure engineering.
• Familiar with cloud platforms (AWS/GCP/Azure), Kubernetes, and CI/CD.
• Experience building AI Agent systems; familiar with LLM tool-calling and agent frameworks (LangChain, MCP).

Responsibilities

• Own day-to-day operations of the US production environment: data storage, key management, decryption services.
• Design and build an AI Agent platform enabling the China team to perform tasks—deployments, log lookups, monitoring queries—without direct access.
• Implement guardrails at the Agent layer: data masking, scoped permissions, approvals.
• Maintain auditable logs of all operations and coordinate with legal for US data compliance (CCPA).

Skills

DevOps/SRE

Cloud platforms (AWS/GCP/Azure)

Kubernetes

CI/CD

AI Agent systems

LLM tool-calling (LangChain, MCP)

Security/compliance (encryption, key管理

Remote collaboration

Tools

LangChain

MCP

Encryption

Key management

Access control

Job description

IT Operations & AI Agent Engineer (US-Based) loaded

About the role

Ambi's data compliance model requires that user data and related operations stay within the US; theChina-based R&D team cannot directly access sensitive data or production systems. This role owns that boundary and builds the AI Agent tooling that gives the China team a safe, indirect way to operatewithout crossing it.

What you'll do

• Own day-to-day operations of the US production environment: data storage, key management, decryption services
• Design and build an AI Agent platform that lets the China R&D team perform operational tasks -
• deployments, log lookups, monitoring queries - through conversational/tool-calling interfaces (function calling, MCP) instead of direct system access
• Implement guardrails at the Agent layer - data masking, scoped permissions, approval workflows - so the Agent can perform tasks but never exposes raw sensitive data
• Maintain complete, auditable logs of all operations
• Work with legal counsel to implement US data compliance requirements (e.g., CCPA) on the technical side
• Manage access control, security monitoring, and incident response for US infrastructure

What we're looking for

• Experience in DevOps/SRE or infrastructure engineering; familiar with cloud platforms (AWS/GCP/Azure), Kubernetes, and CI/CD
• Experience building AI Agent systems; familiar with LLM tool-calling and agent frameworks (LangChain, MCP, etc.)
• Background in security/compliance (encryption, key management, access control) is a plus
• Comfortable working remotely across time zones and languages with a China-based team

Nice to have

• Experience with similar cross-border data compliance architectures (e.g., TikTok-style setups)
• Startup experience; comfortable with ambiguity and fast-moving environments