Note: The job is a remote job and is open to candidates in USA. Discover International is recruiting for a Staff Platform and Security Engineer focused on AI agent infrastructure. The role owns the platform and security foundations of an AI agent platform, including Kubernetes infrastructure, identity, isolation, credentials, observability, reliability, agent safety controls, and technical leadership.
Responsibilities
- Architect and operate a multi-tenant, Kubernetes-based runtime for agent workloads, including custom controllers and operators, CRDs, Helm, and per-tenant isolation
- Build automation that provisions, scales, and tears down isolated environments on demand
- Own infrastructure-as-code (Terraform) across cloud environments, along with CI/CD and progressive delivery
- Design a security model that treats agent workloads as untrusted
- Build short-lived, least-privilege credentials and delegated authorization in place of standing secrets
- Own secrets management and key-managed encryption for sensitive tokens
- Enforce zero-trust service-to-service communication and deny-by-default networking
- Threat-model and mitigate confused-deputy attacks, privilege escalation, prompt injection, and data exfiltration
- Run the platform as a fleet: health monitoring, automated recovery, efficient scaling, and SLOs
- Build observability and audit pipelines (OpenTelemetry) that give a complete, investigable record of agent activity
- Lead incident response and balance reliability, performance, and cost
- Build human-approval workflows for sensitive or irreversible actions
- Build protected configuration that agents cannot modify
- Partner with the AI team so that every agent capability is exposed through governed interfaces
- Set platform and security standards
- Mentor senior engineers through architecture, not just code review
- Shape the infrastructure roadmap with Product, Security, and Leadership
Skills
- 8+ years in software, infrastructure, or distributed systems, with end-to-end ownership of security-critical production systems
- Deep production Kubernetes experience: operators, controllers, multi-tenancy, workload isolation, fleet operations
- Cloud-native architecture on a major cloud provider, plus strong Terraform
- Applied security depth: workload identity, service mesh and mTLS, OAuth 2.0 / OIDC, token exchange, secrets management and KMS, zero-trust design
- Excellent Go and/or Python
- SRE fundamentals: SLOs, incident management, observability, capacity and cost engineering
- High autonomy, and comfort taking ambiguous problems from architecture to production
- Experience with LLM infrastructure, agent platforms, or AI security
- Container sandboxing or runtime isolation technologies
Benefits
- 20% Bonus
- Stock Options
- Equity
- Full benefits
- US Remote (hybrid optional)
Company Overview