Summary
✨ AI‑Generated
An infrastructure architecture role responsible for designing secure cloud environments, access controls, connectivity, and operational foundations for AI-powered systems across major cloud platforms.
Highlights
Opportunity to design secure cloud infrastructure for advanced AI systems, focusing on scalability, identity, security, and modern architecture practices.
Description
About The Role
Running AI agents against a firm's systems is an infrastructure and identity problem as much as an engineering one.
Wherever the agents run, they connect into the firm's systems through MCP servers and must act with the same permissions as the user who invoked them, without introducing new security exposure.
We're hiring an Infrastructure Architect to own the cloud, identity, and security layer that lets our agents run safely in production.
What you'll do
Own how our agents and MCP servers are deployed and hosted across Azure, AWS, and Google Cloud.Implement identity and access so an agent acts with the same permissions as the user who invoked it, through SSO, OAuth, and Microsoft Entra rather than broad service accounts.Build the connectivity and isolation that let agents reach private systems with no public internet exposure: private endpoints, sandboxes, and MCP tunnels.Manage secrets, credentials, and least-privilege access, and build the logging and observability that give a firm a clean audit trail of what every agent did, without persisting personally identifiable information outside the client's environment.Partner with the client's IT and security teams to meet their requirements, from M365 and identity setup to data residency and review.
What we're looking for
Strong cloud and platform engineering across at least two major clouds (Azure, AWS, or Google Cloud), with real depth in one.Hands-on identity and access experience: SSO, SAML, OAuth, and Microsoft Entra or M365 administration.A security-first instinct: least privilege, secrets management, network isolation, and audit logging.Comfort owning deployments end to end and working through a client's IT and security review.Strong familiarity with containers (Docker, Kubernetes), infrastructure as code (Terraform or similar), and CI/CD.Preferred: prior work in financial services or other regulated environments.
Why Dealstitch
We're a senior team with 40+ years of combined private-market technology experience.
You'll work on problems that matter, with direct access to decision-makers, and see the impact of your work in weeks, not quarters.
