Sysdig

Cloud-native security and monitoring for apps

Staff AI Platform Engineer

Platform EngineeringConfirmed live in the last 24 hours

Full-timeRaleigh, NC, USARemote

About the Job

Requirements

Have 6+ years of experience in software engineering, platform engineering, or DevOps, including ownership of a production system or capability relied upon by others.
Have hands-on AWS experience with IAM, ECS or Lambda, CloudWatch, and VPCs.
Have full-stack experience covering backend services, APIs, continuous integration and continuous delivery, and containerized deployments.
Be able to build an MCP server or API integration from scratch rather than only configuring a managed connector.
Have hands-on experience with large language models, including LLM APIs, prompt engineering, and agent development, and have shipped something using them.
Be able to take underspecified tasks, resolve ambiguity, and create impactful solutions.

Responsibilities

Drive business-side Amazon Bedrock runtime and gateway configuration, including model access, cost attribution, content-filtering guardrails, model pinning, and quota management, through an AWS and Okta single-sign-on gateway.
Build and operate the MCP fleet by shipping, securing, and patching self-hosted and managed MCP servers for business applications and databases, and owning the MCP registry.
Partner with IT to transition MCPs into stable, IT-managed assets.
Author the mobile device management configuration payload and the Okta-group-to-IAM mapping for IT to push and enforce.
Specify desktop client setup and authentication flows for non-technical employees.
Build AI- and agent-triggered automations such as approvals, spend alerts, and agent-initiated workflows.
Own the technical direction for the agent-hosting substrate, including design documents and standards adopted by other teams.
Define health and release-safety criteria for agents and MCP servers, including cost, usage, and reliability telemetry through the Bedrock-to-Snowflake pipeline with identity matching and threshold alerting.
Define a tiered-autonomy model covering read-only actions, actions that can execute, human-in-the-loop requirements, and rollback paths.
Build governance that routes workflows by data sensitivity, enforces least privilege and auditability, and keeps unproven models sandboxed away from production data.
Drive alignment across IT, Security, and DevX on the platform direction so multiple teams build against a written standard without owning their roadmaps.

Desired Qualifications

Demonstrate a bias toward shipping and automating manual work.
Be willing to own upgrades, credentials, quotas, and on-call operations.
Raise problems and disagreements early, including when a platform choice appears incorrect.
Use judgment about when to buy instead of build and favor a small, coherent technology stack.

At Sysdig, we believe cloud security isn't a compromise - it's a promise. From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.

We created Falco, the open standard for cloud threat detection, and continue to lead the cloud security market with runtime insights, open innovation, and agentic Al. Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.

Culture matters here. We believe diversity fuels stronger ideas, and open dialogue drives sharper decisions. Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.

If you have the passion to dig deeper, the desire to challenge convention, and the curiosity to build something better, Sysdig is the right place for you.

What you will do

Drive the business-side Bedrock runtime and gateway configuration - model access, cost attribution, content-filtering guardrails, model pinning, and quota management, behind an AWS/Okta-SSO'd gateway - co-owned with our DevX lead, who leads the shared-substrate architecture.
Build and run the MCP fleet - ship, secure, and patch self-hosted and managed MCP servers for business apps and databases, and own the MCP registry. Partner with IT to graduate MCPs into stable, IT-managed assets.
Make the secure path the easy path without administering identity or devices yourself: author the MDM config payload and the Okta-group-to-IAM mapping that IT pushes and enforces, and specify the desktop client setup and auth flows for non-technical employees.
Build the AI and agent-triggered automations (approvals, spend alerts, agent-initiated workflows); general business automation stays with IT.
Own the technical direction for the agent-hosting substrate other teams build on - the design docs and standards, not just the code. There is no existing pattern today; you set it, and other teams adopt it as their default.
Define what "healthy" and "safe to ship" mean for every agent and MCP server on the platform - the cost, usage, and reliability telemetry (the Bedrock-to-Snowflake pipeline, identity-matched, with threshold alerting), plus a tiered-autonomy model: what stays read-only, what can act, what needs a human in the loop or a rollback path.
Build the governance that standard requires. Route workflows by data sensitivity, enforce least privilege and auditability, and keep unproven models sandboxed away from production data.
Drive alignment across IT, Security, and DevX on the platform's direction - get multiple teams building against a written standard without owning their roadmaps.

What you will bring with you

6+ years in software engineering, platform engineering, or DevOps, including ownership of something in production that others depended on.
Hands-on AWS - IAM, ECS or Lambda, CloudWatch, and working VPC knowledge. Required, not a bonus.
Full-stack range - backend services, APIs, CI/CD, containerized deployments.
Builder - you can write an MCP server or API integration from scratch, not just wire up a managed connector.
Hands-on with LLMs - comfortable with LLM APIs, prompt engineering, and agent development; you've shipped something with them.
Self-direction - you can take an underspecified task and figure out the ambiguous parts to create impactful solutions.

What we look for

A bias to ship, and to automate the thing you just did by hand.
Willingness to own the boring parts: upgrades, credentials, quotas, on-call reality.
Candor: you raise problems and disagreements early, including when a platform choice looks wrong.
Judgment about when to buy instead of build. We would rather run a small, coherent stack than a perfect, sprawling one.

When you join Sysdig, you can expect

Extra days off to prioritize your well-being

401(k) Retirement Savings Plan with a 3% company match

Maternity and Parental Leave

Mental health support for you and your family through the Modern Health app

Full health benefits package for you and your family

The U.S. annual salary range for this full-time position is between 123,000 and 154,000 USD/year. Actual offers may be higher or lower than this range based on a variety of factors, including your work location, job-related experience and education.

We would love for you to join us! Please reach out even if your experience doesn't perfectly match the job description. We can always explore other options after starting the conversation. Your background and passion will set you apart, especially if your career path is different.

Sysdig values a diverse workplace and encourages women, people of color, LGBTQIA+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. Sysdig is an equal-opportunity employer. Sysdig does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, sexual orientation, gender identity, or any other legally protected status.

#LI-MC1

#LI-Remote

About the Company

Sysdig

Cloud-native security and monitoring for apps

Sysdig provides cloud-native security and monitoring solutions for applications running in containers and Kubernetes. It offers products like Sysdig Secure for security and Sysdig Monitor for performance monitoring, delivering data collection from cloud-native environments to help enterprises manage compliance, security, and performance. The platform typically uses agents and a SaaS or on-premises interface to collect telemetry, run security checks, and present dashboards, enabling real-time visibility and risk management across complex IT stacks. What sets Sysdig apart is its integrated approach that combines security, monitoring, and compliance tooling in one platform with scalable tiers, targeting large organizations across technology, finance, healthcare, and government sectors. The company’s goal is to help customers securely run cloud-native applications with continuous visibility and control, reducing risk while maintaining high performance.

Company size: 501-1,000
Company stage: Growth Equity (Non-Venture Capital)
Total funding: $729.5M
Headquarters: Raleigh, NC
Founded: 2013

Recently Posted Jobs

Explore more opportunities at Sysdig

See more jobs