About the Role

The CTO Intelligence Hub is OPSWAT’s internal AI-powered data platform; dashboards and APIs that give leadership real-time visibility into AI adoption, financial performance, customer health, and sales. The platform runs on a fleet of Flask, FastAPI, and Streamlit applications backed by a Fabric → Parquet → S3 data pipeline, all tied together by an agentic coding system where GitHub Issues become production pull requests in under three minutes.

As AI Platform Architect, you own the application layer. You design and build new intelligence products, evolve existing dashboards, and work with the AI coding pipeline — writing the specs, reviewing the plans, and guiding the implementation. You are the “human senior engineer” in a team where your main coding collaborator is Claude.

What You Will Own

• Application architecture: Flask APIs, FastAPI microservices, Streamlit dashboards; schema and data-flow design across 12+ applications
• Agentic coding pipeline: creating well-scoped GitHub Issues, reviewing AI-generated implementation plans, approving or refining, merging PRs; the pipeline (claude-coder) takes issues from triage to production PR in ~3 minutes for routine work
• Data pipeline & analytics: extending the Fabric → Parquet → S3 pipeline; designing new analytics (percentile ranking, quadrant analysis, trend computation); HR enrichment and data quality
• Test-driven development: writing pytest spec suites that the AI implementer must satisfy; test files are the spec and cannot be modified by the AI
• Claude API / CLI integration: building features that call Claude for inference (content generation, analysis, RFP answering); working with OAuth-based CLI inference and direct API patterns
• UX & visualisation: Plotly dashboards, Jinja2 templates, React/Vite prototypes; maintaining the OPSWAT brand system across all apps
• Architecture documentation: keeping Confluence up to date as the system evolves; writing CLAUDE.md context files that teach the AI pipeline how each repo works
• New product design: identifying gaps in current intelligence coverage and proposing, scoping, and shipping new internal tools

You Will Be a Strong Fit If You Have

• 3–7 years of Python backend development (Flask, FastAPI, or equivalent)
• Strong data skills: pandas, SQL, Parquet, data modelling; you are comfortable designing a metrics pipeline from raw HR and usage data to ranked leader-board
• Experience working with LLM APIs (OpenAI, Anthropic, or equivalent) in production
• A test-first mindset: you write tests before code and believe the test suite is the specification
• Clear written communication because your primary “pairing partner” reads GitHub Issues, your ability to write precise, unambiguous requirements directly determines output quality
• Comfort reading and reviewing AI-generated code critically; you know when to approve, when to push back, and when to take the keyboard yourself
• Experience with REST API design and documentation

Nice to Have

• Streamlit or Plotly dashboard development
• React / TypeScript (for UX prototypes)
• Microsoft Fabric, Azure Data Warehouse, or similar cloud data platforms
• Familiarity with GitHub Actions and CI/CD pipeline design
• Experience building multi-language document processing (the RFP automation covers 14 languages)
• Prompt engineering and system-prompt design for agentic workflows
• OPSWAT product knowledge (MetaDefender, OESIS, CDR - not required but helpful)

The Position

• Join the infrastructure team behind MDaaS — a real-time malware scanning platform handling 30M+ requests/day, built on AWS, Kubernetes, and event streaming.

• You'll work in an agile scrum team, owning infrastructure-as-code, CI/CD pipelines, and observability. Security and compliance are first-class requirements, not afterthoughts.

What You Will be Doing

• Deploy and maintain workloads on EKS via ArgoCD — review GitOps PRs, handle sync failures, approve image updates

• Write and update Helm charts / Kustomize overlays across dev / staging / prod

• Triage alerts from Prometheus / Grafana / Coralogix — root cause analysis, resolve or escalate

• Review and apply Terraform changes — plan, validate, and merge infra PRs (EKS, MSK, ALB, IAM)

• Maintain CI/CD pipelines on Bitbucket Pipelines and GitHub Actions — fix broken builds, integrate security scans

• Configure and tune KEDA ScaledObjects for Kafka / RabbitMQ consumers

• Triage CVEs from Blackduck / Trivy reports — prioritize CVSS ≥ 7.0, coordinate patches with dev team

• Rotate secrets, verify External Secrets Operator sync, enforce no-hardcoded-credentials policy

• Document infrastructure and application changes for engineers and QA

• Participate in on-call rotation — incident response, post-mortems, runbook updates

• Research new tools and technologies to address current pain points and improve system reliability, scalability, and security — evaluate, prototype, and propose adoption when appropriate

What We Need From You

Education & Background

• BA/BS in Computer Science, Engineering, or equivalent hands-on experience

Soft Skills

• Strong verbal and written communication in English

• Self-motivated; works well in a fast-paced, collaborative team

• Eager to learn new tools and apply them quickly

• Passionate about solving problems in a principled, elegant way

• Comfortable both teaching and learning from teammates

Cloud & Infra

• AWS hands-on: EKS, ECR, IAM/IRSA, MSK, S3, ALB, VPC, Security Groups

• Terraform: write modules, manage remote state, integrate with CI

• Kubernetes: RBAC, ingress, network policies, HPA, resource tuning — cluster management via Rancher or K9s

• Helm + Ansible: author charts and playbooks, manage versioning

• Docker: multi-stage builds, image optimization

• Linux/Windows systems administration

CI/CD & GitOps

• Bitbucket Pipelines, GitHub Actions, or TeamCity — write and maintain, not just use

• ArgoCD: sync policy, health checks, rollback

• PR-based deployments; no direct commits to main/prod

Observability

• Prometheus, Grafana, CloudWatch, Elasticsearch — setup and maintain

• Structured logging, alert routing, dashboard authoring

Security

• Least privilege: IAM, IRSA, K8s RBAC — no wildcard permissions

• Secret management: External Secrets / AWS Secrets Manager, zero hardcoded credentials

• Supply chain: dependency scanning (Blackduck / Snyk / Trivy), CVE triage by CVSS score

• Network segmentation: private subnets, Security Groups, ingress/egress control

• Working knowledge of ISO/IEC 27001 and SOC 2 Type II — access control, audit trail, change management

• Familiar with CIS Benchmarks for Kubernetes and Linux hardening

Development

• Python and/or Go — scripting, tooling, automation

• Able to read Node.js/TypeScript code to debug service issues independently

AI & Tooling

• Actively uses AI coding tools (GitHub Copilot, Cursor, Claude) in daily workflow — writing scripts, Terraform modules, Helm templates, and debugging

• Knows how to prompt effectively, verify AI output, and not blindly trust generated infrastructure code

Nice-to-have

• Experience in the cybersecurity industry

• Knowledge of compliance frameworks: NIST CSF, HIPAA, GDPR — applied to real infrastructure

• Istio: mTLS, VirtualService/DestinationRule, traffic management

• KEDA advanced: custom metrics, scale-to-zero, cooldown tuning

• Kafka (MSK) operations: topic management, consumer lag, AKHQ

• Policy-as-code: OPA/Gatekeeper or Kyverno

• OWASP container and API security principles

• Coralogix / Datadog with OpenTelemetry — custom pipelines, alert routing

• Kubecost cost analysis, Kubeshark traffic capture

• Experience with large-scale systems: 30M+ requests/day

• Azure exposure (secondary to AWS)

• Has used AI to generate, review, or optimize infrastructure-as-code (Terraform, Helm, bash scripts) and understands its limitations: hallucinations, outdated API references, security blind spots

• Experimented with AI APIs (OpenAI, Anthropic) to build internal automation or tooling