AI平台工程师
AI Platform Engineer
在Sysdig，我们相信云安全不是一种妥协——而是一种承诺。从一开始，我们的使命就非常明确：帮助组织以正确的方式保障云中的创新。
我们创建了Falco，这是云威胁检测的开放标准，并继续通过运行时洞察、开放创新和代理AI引领云安全市场。由超过60%的财富500强企业信任的技术创造者，Sysdig为团队提供实时的清晰度，让他们快速行动并保护最重要的东西。
文化在这里至关重要。我们相信多样性能激发更强大的想法，开放对话能推动更精准的决策。连续五年被列为最佳工作场所之一，并且是德勤最快成长公司之一，我们致力于提升云安全和职场文化的标杆。
如果你有深入挖掘的热情，有挑战传统愿望，以及有构建更好事物的好奇心，那么Sysdig就是适合你的地方。
你将负责
构建和运行MCP车队——为业务应用和数据库的自托管和托管MCP服务器进行交付、安全和补丁管理，并管理MCP注册表。
负责其他团队所依赖的代理平台——部署模式、防护措施、可观测性和托管基础架构，让其他团队无需你参与即可交付代理。
共同负责Bedrock运行时和网关——在AWS/Okta-SSO网关后实现访问建模、成本归因、内容过滤防护措施、模型固定和配额管理。
使AI支出和使用可见——构建Bedrock到Snowflake的数据管道，与身份匹配，包含使用跟踪和阈值警报。
让安全路径成为便捷路径——负责非技术人员的MDM配置、桌面客户端设置、凭证和认证流程；在Claude桌面、Slack和Google Workspace中构建AI自动化。
将治理融入平台——根据数据敏感性路由工作流，强制最小权限和可审计性，并将未经验证的模型隔离在生产数据之外，作为配置而非重写。
你将带来的能力
6年以上软件工程、平台工程或DevOps经验，包括对他人依赖的生产环境的负责经验。
具备实际的AWS经验——IAM、ECS或Lambda、CloudWatch，以及对VPC的了解。这是必需条件，而非加分项。
全栈能力——后端服务、API、CI/CD、容器化部署。
是建造者，不只是集成者——你可以从零开始编写MCP服务器或API集成，而不仅仅是连接已有的连接。
查看英文原文
At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.
We created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.
Culture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.
If you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.
What you will do
Build and run the MCP fleet — ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and manage the MCP registry.
Own the agent platform other teams build on — the deploy pattern, guardrails, observability, and hosting substrate that let other teams ship agents without you in the loop.
Co-own the Bedrock runtime and gateway — model access, cost attribution, content-filtering guardrails, model pinning, and quota management behind an AWS/Okta-SSO'd gateway.
Make AI spend and usage visible — build the Bedrock-to-Snowflake pipeline, identity-matched, with usage tracking and threshold alerting.
Make the secure path the easy path — own MDM config, desktop client setup, credentials, and auth flows for non-technical employees; build AI automations across Claude desktop, Slack, and Google Workspace.
Build governance into the platform — route workflows by data sensitivity, enforce least privilege and auditability, and keep unproven models sandboxed away from production data as configuration, not a rewrite.
What you will bring with you
6+ years in software engineering, platform engineering, or DevOps, including ownership of something in production that others depended on.
Hands-on AWS — IAM, ECS or Lambda, CloudWatch, and working VPC knowledge. Required, not a bonus.
Full-stack range — backend services, APIs, CI/CD, containerized deployments.
Builder, not just integrator — you can write an MCP server or API integration from scratch, not just wire up a managed connector.
Hands-on with LLMs — comfortable with LLM APIs, prompt engineering, and agent development; you've shipped something with them.
Self-direction — you can take an underspecified task and figure out the parts nobody wrote down.
What we look for
Bias to ship — and to automate whatever you just did by hand.
Ownership of the boring parts — upgrades, credentials, quotas, on-call.
Candor — you raise problems and disagreements early, even about platform choices.
Judgment on buy vs. build — you'd rather run a small, coherent stack than a sprawling "perfect" one.
When you join Sysdig, you can expect
Extra days off to prioritize your well-being
401(k) Retirement Savings Plan with a 3% company match
Maternity and Parental Leave
Mental health support for you and your family through the Modern Health app
Full health benefits package for you and your family
The U.S. annual salary range for this full-time position is between 123,000 and 154,000 USD/year. Actual offers may be higher or lower than this range based on a variety of factors, including your work location, job-related experience and education.
We would love for you to join us! Please reach out even if your experience doesn't perfectly match the job description. We can always explore other options after starting the conversation. Your background and passion will set you apart, especially if your career path is different.
Sysdig values a diverse workplace and encourages women, people of color, LGBTQIA+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. Sysdig is an equal-opportunity employer. Sysdig does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, or any other legally protected status.
#LI-MC1
#LI-Remote