Platform / DevSecOps Engineer – Secure AI Systems

About the role

As a Platform / DevSecOps Engineer focusing on Secure AI Systems, you will be the principal hands‑on owner of the secure platform foundation for a groundbreaking AI architecture. The role spans isolated cloud networks, hybrid infrastructure, and a future fully air‑gapped on‑premises platform, requiring close collaboration with senior technical leaders.

Key responsibilities

• Design, build, automate, operate, secure and ensure recoverability of a multi‑environment platform covering cloud, hybrid and air‑gapped deployments.
• Architect scalable runtime components for real‑time inference, near‑real‑time reasoning, large offline simulations, and edge environments.
• Own end‑to‑end operation of compute, storage, networking, database and runner infrastructure for isolated and air‑gapped settings.
• Establish and enforce Zero Trust boundaries across public, quarantine, DMZ, cloud, on‑premises, developer and internal application zones.
• Administer GitHub Enterprise Server, including repositories, permissions, ephemeral Actions runners, audit logs, upgrades, backups and disaster‑recovery.
• Integrate identity, privileged‑access, secrets, key and certificate services using federation, SAML, OIDC, RBAC, conditional access and credential rotation.
• Develop a controlled software‑supply‑chain pipeline that scans, validates, traces and securely promotes code, containers and firmware.
• Engineer geographically redundant backup, replication, restore and failover capabilities with routine testing.
• Automate monitoring and continuous security using reusable Terraform modules.

Required profile

• Hands‑on experience designing and operating secure platforms in cloud, hybrid and air‑gapped environments.
• Proven ability to work with senior technical teams and drive architecture decisions.
• Strong problem‑solving skills and accountability for platform performance, availability and cost.

Required skills

• Terraform
• GitHub Enterprise Server
• SAML
• OIDC
• RBAC
• Zero Trust architecture
• Cloud platforms (public and private)
• Hybrid infrastructure
• Air‑gapped system design
• Identity and privileged‑access management
• Secrets, key and certificate management
• Software‑supply‑chain security
• Backup, replication, restore and failover engineering