AI Cloud Platform Engineer

Responsibilities

Kforce has a client seeking an AI Cloud Platform Engineer in Miami, FL. Key Responsibilities: AI Platform & MCP Services:

• Design, develop, and maintain Model Context Protocol (MCP) services that securely connect AI agents to OneDrive, SharePoint, and enterprise data sources
• Integrate with Microsoft Graph, Entra ID, and Microsoft 365 permissions while enforcing least-privilege access, auditing, and governance controls
• Implement secure content discovery, retrieval, metadata management, and permissions-aware access patterns

Agent Runtime & AI Infrastructure:

• Build reusable AI runtime and gateway services on AWS, supporting identity, memory, tool access, observability, and operational controls
• Develop scalable patterns for authentication, authorization, policy enforcement, telemetry, and lifecycle management
• Integrate OpenAI, Anthropic, and other LLM platforms with enterprise applications and workflows

AI Security & Governance:

• Partner with cybersecurity teams to implement AI security controls, including access boundaries, secrets management, audit logging, monitoring, and data protection
• Evaluate and mitigate risks such as prompt injection, excessive permissions, unauthorized data exposure, and unsafe agent actions
• Contribute to deployment automation and operational support for AI security solutions

AI Enablement & Developer Experience:

• Guide teams in adopting agentic AI, retrieval systems, tool integrations, and model selection strategies
• Create reference architectures, templates, documentation, and reusable implementation patterns
• Support enterprise adoption of AI-assisted development tools such as Claude Code, Codex, and Cursor

DevOps & Platform Engineering:

• Build developer platforms that streamline source control, CI/CD, testing, infrastructure provisioning, and deployment processes
• Enhance Infrastructure-as-Code and automation practices using Terraform and modern cloud-native tooling

Requirements

• 10+ years of software engineering, cloud engineering, or platform engineering experience
• 5+ years of designing, deploying, and operating production cloud services
• Strong AWS expertise, including IAM, networking, APIs, containers, serverless technologies, observability, and secrets management
• Experience building APIs, integrations, MCP servers, and enterprise data access solutions using OAuth 2.0 and OpenID Connect
• Hands-on experience with Microsoft Graph, OneDrive, SharePoint, and Microsoft Entra ID
• Experience integrating and operating OpenAI, Anthropic, or similar LLM platforms in production environments
• Proficiency in Python, TypeScript, or JavaScript with strong testing, troubleshooting, and code review practices
• Experience with Terraform, Git-based development, and CI/CD tools such as GitHub Actions or CircleCI
• Strong understanding of secure software delivery, identity management, governance, and AI security best practices
• Excellent communication skills with the ability to collaborate across architecture, security, and development teams

Preferred Qualifications

• Experience with Amazon Bedrock AgentCore, including Gateway, Runtime, Identity, Memory, or Observability capabilities
• Knowledge of Microsoft 365 governance, SharePoint permissions, and delegated consent models
• Experience with Kubernetes, ECS, API Gateway, Lambda, CloudWatch, and cloud cost optimization
• Background enabling enterprise developer platforms, security tooling integrations, and AI-assisted software development practices

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.