Infrastructure Architect

Role Overview

Dealstitch AI is hiring an Infrastructure Architect to own the cloud, identity, and security layer that allows AI agents to run safely in production. Agents connect to client systems via MCP servers and must operate with the same permissions as the invoking user, without expanding security exposure.

Responsibilities

• Cloud & Hosting: Own deployment and hosting of agents and MCP servers across Azure, AWS, and Google Cloud.
• Identity & Access: Implement identity and access so agents act with the invoker’s permissions, using SSO, OAuth, and Microsoft Entra (Entra ID) instead of broad service accounts.
• Connectivity & Isolation: Enable secure access to private systems with no public internet exposure using:
  • Private endpoints
  • Sandboxes
  • MCP tunnels
• Secrets & Least Privilege: Manage secrets/credentials and enforce least-privilege access.
• Auditability & Observability: Build logging and observability to provide a clear audit trail of agent actions, without persisting PII outside the client environment.
• Client Collaboration: Partner with customer IT and security teams to satisfy requirements (e.g., M365/identity setup, data residency, and review processes).

Requirements

• Strong cloud/platform engineering across at least two major clouds (Azure, AWS, or GCP), with deep expertise in one.
• Hands-on identity/access experience with SSO, SAML, OAuth, and Microsoft Entra / M365 administration.
• Security-first mindset: least privilege, secrets management, network isolation, and audit logging.
• Ability to own deployments end-to-end and work through client IT/security review.
• Familiarity with containers (Docker, Kubernetes), Infrastructure as Code (Terraform or similar), and CI/CD.

Preferred Qualifications

• Experience in financial services or other regulated environments.