Cloud Platform Engineer

About us

Appnovation is the AI Product Company. Headquartered in Vancouver, Canada, with teams around the world, Appnovation builds AI products, delivers enterprise AI and digital solutions, and co-invests with clients to bring new AI products to market.

Open source has been the foundation of Appnovation's work since 2007, and it remains the foundation underneath every AI product the company builds today. Appnovation teams work with organizations in highly regulated industries, including global leaders such as Pfizer, Google and AstraZeneca, to help them adopt AI they can govern and own.

We’re hiring AWS Cloud Platform Engineers to build and own the platform’s foundation. That means the AWS accounts, networking, identity and infrastructure-as-code everything runs on, plus the path from commit to running agent. Each engineer will have a main focus in one of the two areas below and work closely across both. This is a named-team engagement, so the person we propose is the person who starts.

FOCUS AREAS

• Infrastructure & IaC: Build and own the base AWS layer: accounts, networking, identity boundaries, and the reusable IaC modules the rest of the platform is built from.
• CI/CD & Runtime Deployment: Own the path from commit to running agent: container builds, Amazon ECR, pipelines, environment promotion, and AgentCore Runtime session configuration.

ROLE RESPONSIBILITIES

• Account and Environment Foundation: Design and stand up the multi-account AWS structure (Organizations, Control Tower or equivalent) with guardrails and service control policies.
• Networking: Build secure VPC designs and private connectivity (VPC endpoints, PrivateLink, Transit Gateway) so agent workloads can reach internal systems safely.
• Identity Boundaries: Define IAM roles, permission boundaries and least-privilege access for platform services, pipelines and consuming teams.
• Reusable IaC Modules: Build and maintain versioned Terraform and/or AWS CDK modules other teams can use with confidence.
• Build Pipelines: Design and own CI/CD pipelines that build, test, scan and publish agent containers to Amazon ECR.
• Environment Promotion: Automate promotion from dev to test to production with approval gates, rollback and version tracking.
• Runtime Deployment: Configure and deploy agents to AgentCore Runtime, including session settings, scaling, config and secrets handling.
• Build starter repos and pipeline templates so every new agent is set up and shipped the same way.