Empleos de remote architect

Your Mission

To engineer the secure, scalable foundation of the platform. You will build an automated, self-healing cloud infrastructure on AWS that respects strict enterprise governance (Control Tower) while deploying private AI inference endpoints using AWS Bedrock to ensure sensitive data never leaves the secure cloud boundary.

Role Overview

We are seeking a Senior DevOps Engineer to lead the infrastructure build for a modernized, enterprise-grade digital ecosystem. This is not a simple "EC2 and S3" setup. You will be deploying a Microservices Architecture (Next.js, Node.js, Python) into a client-governed AWS Control Tower environment .

Uniquely, this role involves LLMOps with a focus on AWS Bedrock. You will be responsible for configuring and deploying private Foundation Models (like Llama 3 or Mistral) as secure endpoints. You ensure these models function as "private GPTS" (GPT-OSS) within a secure VPC, scrubbing data and managing throughput without relying on public APIs. You will leverage an AI-first workflow (using tools like Cursor and Claude) to write Infrastructure-as-Code (IaC) 10x faster than manual methods.

Key Responsibilities

• AWS Bedrock Deployment: Provision and manage private throughput for Open Source LLMs (e.g., Llama, Mistral) using AWS Bedrock. Ensure models are configured with the correct guardrails and VPC endpoints to prevent public internet exposure.
• Infrastructure as Code (IaC): Architect and provision the entire stack (AWS ECS/EKS, Lambda, RDS, API Gateway) using Terraform or AWS CDK.
• Enterprise Governance: Ensure all deployments integrate natively with AWS Control Tower, inheriting the client’s existing security guardrails and networking policies .
• LLMOps & Containerization: Manage the containerized infrastructure for auxiliary AI services (Vector Databases, Embeddings) alongside the Bedrock implementations.
• CI/CD Automation: Build robust pipelines (GitHub Actions) that automate testing, security scanning, and blue/green deployments.
• Security Engineering: Configure Web Application Firewalls (WAF), enforce TLS 1.3, and manage networking to ensure "Air-Gapped" behavior for private AI processing .
• AI-Accelerated Engineering: Actively utilize AI coding assistants (Cursor, Claude CLI) to generate IaC templates and debug deployment logs.

Required Tech Stack:

• Cloud Provider: AWS (specifically Bedrock, Control Tower, ECS Fargate, VPC Networking).
• IaC: Terraform or AWS CDK (TypeScript/Python).
• AI Ops: AWS Bedrock (Provisioned Throughput, Knowledge Bases).
• CI/CD: GitHub Actions (Blue/Green deployments) Optional
• Security: WAF, TLS 1.3, PrivateLinks (Air-gapped AI).
• AWS Observability tools.

Core Skills and Competencies

• Cloud Provider: Expert-level knowledge of AWS. Specifically: Bedrock, Control Tower, ECS (Fargate), and VPC Networking.
• Generative AI Ops: Experience configuring AWS Bedrock knowledge bases, agents, and provisioned throughput for Open Source models.
• IaC: Mastery of Terraform or AWS CDK (TypeScript/Python).
• LLMOps: Familiarity with the operational requirements of serving LLMs (latency management, token usage monitoring).
• Security: Knowledge of SOC 2 compliance requirements and IAM roles.
• AI Tooling: Proficiency in using AI agents (Cursor, Claude) to automate infrastructure boilerplate.

Domain of Mastery

• Private AI Architecture: The ability to architect subnets where Bedrock models process sensitive data without that data ever traversing the public internet .
• The "Guardrails" Mindset: Understanding how to build infrastructure that automatically adheres to corporate policies (Control Tower) without blocking developer velocity.
• Horizontal Auto-Scaling: Configuring triggers to scale web and API layers up/down based on traffic spikes to optimize costs .
• FinOps for AI: Managing cloud spend by optimizing Bedrock throughput and utilizing spot instances for stateless workloads

Job Type: Full-time

Pay: $80,000.00 - $90,000.00 per month

Work Location: Remote