platform engineer for AI agent platforms

The project supports initiatives in AWS, AI, and data engineering for a major science and technology company in the pharmaceutical industry, with plans to launch more than 20 additional initiatives.

• Design, provision, and manage AWS infrastructure using Terraform in line with the AWS Well-Architected Framework;
• Own and operate EKS clusters end-to-end, including managed node group lifecycle, Karpenter autoscaling, cluster add-on upgrades, IRSA configuration, and multi-AZ resilience;
• Build and maintain automated deployment pipelines with GitHub Actions and ArgoCD;
• Enable Dev, QA, and Production deployments across multiple environments;
• Implement Blue/Green and Canary release strategies;
• Integrate AWS-native security and governance controls;
• Enforce policy controls using OPA and Kyverno admission controllers;
• Implement and manage the observability stack with Amazon Managed Prometheus, Amazon Managed Grafana, CloudWatch Container Insights, and AWS X-Ray;
• Leverage Amazon Bedrock, SageMaker, and Comprehend for AI agent orchestration;
• Implement cost-efficient architecture practices using Spot Instances, Savings Plans, Karpenter bin-packing, and scheduled scale-to-zero;
• Partner with platform and ML teams to onboard AI agent workloads;
• Integrate MCP servers and execution frameworks;
• Support extensibility of the agent ecosystem.

• 4+ Years of hands-on AWS experience;
• AWS Solutions Architect certification at Associate or Professional level;
• Strong hands-on experience with EKS cluster provisioning and operations;
• Experience with managed node groups, Karpenter, and Helm chart management;
• Knowledge of Kubernetes RBAC and network policies;
• Advanced Terraform skills, including modular design, remote state management, multi-environment configuration, and security scanning with Checkov or tfsec;
• Deep knowledge of EKS, ECR, ALB, Route 53, ACM, IAM, KMS, Secrets Manager, IAM Identity Center, CloudTrail, AWS Config, GuardDuty, Security Hub, and AWS WAF;
• Practical experience with Amazon Bedrock, SageMaker, and Comprehend;
• Experience with GitOps tools such as ArgoCD or Flux;
• Experience building CI/CD pipelines for container workloads;
• Experience with OIDC federation between GitHub Actions and AWS and EKS OIDC provider integration;
• Familiarity with Prometheus, Grafana, OpenTelemetry, AWS X-Ray, and CloudWatch Logs Insights;
• Strong understanding of Pod Security Standards, Network Policies, admission webhooks, and service account least-privilege principles;
• English at B2 Upper Intermediate level;
• Nice to have: AWS DevOps Engineer or Security Specialty certification, LangChain or Claude Agent SDK, A2A, MCP, Amazon Bedrock Agents, Knowledge Bases or Guardrails, AWS Fault Injection Service, multi-tenant platform design, Python, Go or Node.js, AWS Cost Explorer, Compute Optimizer, tagging governance, Savings Plan management.

• No conditions specified