Job Description & Details
This is a heavy-hitting platform engineering role focused on building secure, production-grade AI infrastructure that connects enterprise data sources like SharePoint and OneDrive to advanced LLMs. If you enjoy wrestling with IAM boundaries, OAuth flows, and agentic runtimes rather than just wrapping simple API calls, this position is worth a serious look.
What You'll Actually Be Doing
Your day-to-day will involve designing Model Context Protocol (MCP) services and AWS-backed AI gateways that let autonomous agents safely query company data without blowing open security holes. You will spend a lot of time collaborating with cybersecurity teams to enforce least-privilege access, mitigating risks like prompt injection, and building reusable infrastructure patterns using Terraform and Python or TypeScript. It is a mix of cloud platform architecture and bleeding-edge AI integration where stability and security are paramount.
The Core Tech Stack
AWS is your primary playground here, so you need deep familiarity with IAM, serverless architectures, networking, and secrets management. On the AI and integration side, you must know how to build secure APIs using OAuth 2.0, interact with Microsoft Graph and Entra ID for permissions handling, and wire up LLM platforms like OpenAI and Anthropic. Kubernetes, Terraform, and strong CI/CD pipelines wrap around the entire stack to keep deployments automated and observable.
Interview Expectations
The interview panel will likely probe deep into how you handle least-privilege access when dealing with autonomous agents. Expect a tough question on how you would design an MCP server that securely queries SharePoint without leaking unauthorized metadata to an LLM. They want to see that you understand blast radiuses, identity propagation, and how to gracefully fail when an agent attempts an unauthorized action. Another likely topic is AWS identity and networking isolation, testing your ability to lock down enterprise cloud environments.
Application Advice
Skip the generic cloud buzzwords and make sure your resume explicitly highlights your hands-on experience with AWS security, IAM, and backend integrations using Python or TypeScript. If you have built custom authentication flows, OAuth 2.0 services, or worked with Microsoft Graph or Entra ID, bring those projects front and center. The ATS will be scanning heavily for terms like Terraform, CI/CD, least-privilege access, and LLM production deployments, so weave those exact keywords naturally into your engineering accomplishments.