Senior Platform Engineer

Job Summary

Senior Platform Engineer – Responsible for the technical implementation of Cox Automotive’s centralized Enterprise AI Integration Platform, which provides secure, observable, and self‑service AI gateway functionality for enterprise systems.

Compensation:
Base salary range of $101,500 – $169,100 per year, with potential incentive program.

• Design, implement, and optimize the central AI Gateway MCP server – the governed endpoint through which all AI client connections route, using FastAPI + Uvicorn for high‑concurrency workloads.
• Build and maintain the Redis Elasti Cache session layer that binds Microsoft Entra identity to role‑resolved MCP tool sets, including token lifecycle management, sliding TTL extension, per‑user quota enforcement, and distributed rate limiting.
• Implement the on‑demand connector provisioning engine – a system that provisions compute containers with enterprise client drivers, establishes VPC‑internal network paths, and retrieves credentials from AWS Secrets Manager when an AI agent declares intent to access a data source.
• Build enterprise system connectors as MCP tool sets such as Oracle DB, SharePoint Graph API, Rally, Service Now, and a vendor connector approval pipeline with ECR container image scanning and an Aurora‑backed connector registry.
• Implement comprehensive automated testing: unit, integration, load testing (1,000+ concurrent users), and chaos testing for connector fault tolerance.
• Build and maintain the full observability stack – structured logging, Prometheus metrics, Kinesis Firehose to Open Search indexing, and Grafana dashboards for per‑user, per‑tool, per‑session audit trails.
• Design and implement CI/CD pipelines for all platform components via Git Hub Actions, with automated container image builds, ECS task definition updates, and blue/green deployments.
• Own security controls:
  Entra OIDC token validation, PII masking on all tool responses, WAF rule management, Secrets Manager integration with autorotation, and OWASP‑aligned secure API design.
• Maintain and extend the existing Snowflake MCP codebase that forms the foundation of the platform, including session management, RBAC, PII masking, configuration management, and secrets integration modules.
• Develop troubleshooting and diagnostic tools for production support.
• Create documentation, runbooks, and operational playbooks for platform support and maintenance.

• Bachelor’s degree in a related discipline and 4 years of experience in a related field (or equivalent combinations of education and experience).
• Python development experience (4+ years) with async/await patterns, FastAPI, multiprocessing, and production performance optimization.
• Hands‑on implementation experience with Model Context Protocol (MCP) servers, tool definitions, and client integration patterns.
• Deep knowledge of AWS services including ECS Fargate, Elasti Cache Redis, Secrets Manager, Route
  53, ALB, ECR, Aurora PostgreSQL, SSM Parameter Store, Cloud Watch, and Kinesis Firehose.
• Microsoft Entra  / Azure AD integration experience: OIDC federation, group membership extraction via Graph API or JWT claims, RBAC pattern implementation.
• Database integration and optimization expertise with Oracle, PostgreSQL, Snowflake, and SQLServer, including connection pooling, query optimization, and schema introspection.
• Distributed systems patterns such as circuit breakers, retry with exponential backoff, bulkhead isolation, Redis‑backed distributed state, and graceful degradation.
• Container platform skills:
  Docker multi‑stage builds, ECS task definitions, non‑root container security, health‑check endpoint implementation.
• REST API security knowledge: JWT validation, rate limiting, input validation, PII detection and masking.
• Observability experience: structured JSON logging, Prometheus client instrumentation, distributed tracing concepts, and Cloud Watch Logs Insights.
• Version control and CI/CD experience with Git, Git Hub Actions, and automated testing pipelines.

• High‑concurrency MCP server development supporting enterprise‑scale concurrent sessions.
• Snowflake advanced optimization: warehouse sizing, query profiling,…