AWS Al / IoT Architect

AWS AI/IoT Architect  

Redapt Inc. is a pioneering world-class data center infrastructure integrator, technology engineering firm, and cloud services provider. Our teams focus on delivering innovative solutions and services that power our customers' most demanding applications and enable them to extract powerful insights from data that drive true business value.  

We are looking for a Senior AWS IoT Architectto join our Cloud Solutions team. This hands-on role will build and operate secure, multi-tenant IoT platforms on AWS, connecting embedded Linux devices and edge AI hardware to cloud services, and building and deploying generative AI solutions on AWS using Amazon Bedrock. 

Our engineers own implementation from device provisioning and on-device software through cloud integration, over-the-air updates, and fleet operations. You will work with cloud, embedded, and hardware teams to deliver reliable solutions and validate them on simulated fleets and physical development boards.

Responsibilities  

• Design and implement AWS IoT Core solutions for device onboarding, connectivity, identity, fleet management, and tenant isolation, using per-device X.509 certificates, mutual TLS, fleet provisioning with claim certificates, certificate revocation, and AWS Private CA. 

• Develop AWS IoT Greengrass v2 components, recipes, and deployments for both the Java nucleus and nucleus lite, including on resource-constrained devices, with recovery and state-management behavior suited to the device. 

• Design, develop, test, and deploy AI applications using Amazon Bedrock foundation models and AWS services, including model invocation, inference settings, and integration through AWS SDKs. 

• Build retrieval-augmented generation (RAG) solutions using Amazon Bedrock Knowledge Bases or custom retrieval pipelines, including ingestion, chunking, embeddings, vector stores and vector search, retrieval quality, grounding in enterprise data, and source citations. 

• Implement AI agents and tool integrations that connect models to enterprise APIs and workflows, with schema validation, controlled execution, error handling, explicit permissions, and human approval where needed. 

• Develop prompts and structured extraction workflows for document understanding, classification, summarization, and business process automation. 

• Build Python services and APIs that integrate AI capabilities with customer applications, databases, and enterprise data sources. 

• Create representative evaluation datasets and automated tests to measure accuracy, grounding, extraction quality, and agent task completion; validate changes before release. 

• Implement layered AI safeguards using Amazon Bedrock Guardrails, IAM, encryption, data access controls, output validation, and protections against prompt injection. 

• Build on-device agents in Python and C/C++ for embedded Linux, build board images with Yocto, integrate systemd services, and cross-compile and package software for Arm and other embedded targets. 

• Implement secure OTA pipelines for applications, models, and supported firmware, with manifests signed using AWS KMS or AWS Signer, verification before installation, staged rollout, health checks, failure recovery, rollback, and anti-rollback controls. 

• Manage static and dynamic thing groups and AWS IoT Jobs, including rollout rates, abort thresholds, retries, and fleet deployment status. 

• Build MQTT telemetry pipelines, topic structures, versioned message schemas, and IoT rules that route data to streaming services and Amazon S3, including buffering, reconnect behavior, and duplicate-message handling. 

• Test at fleet scale with containerized device simulators and real-board lab testing, covering load, connectivity, provisioning, OTA, and recovery; diagnose connectivity, interrupted updates, power-loss recovery, security, and device performance issues. 

• Apply device security practices, including secure boot, debug-port lockdown, least-privilege IoT policies, and hardware-backed keys where the device supports them. 

Skills you bring with you  

• Strong Python and software engineering skills, including API development, automated testing, debugging, code review, and maintainable application design. 

• AWS IoT Device Management and AWS IoT Device Defender, including fleet indexing, secure tunneling, and audit checks. 

• Knowledge and experience in developing tenant-aware AWS backend workflows with Lambda, Step Functions, EventBridge, and DynamoDB partition design for multi-tenant data, with tenant-scoped IAM and IoT policies 

• Practical experience with RAG, embeddings, vector stores, retrieval quality, and grounding responses in enterprise data, including Amazon Bedrock Knowledge Bases. 

• Experience building agent workflows and tool calling, with schema validation, controlled execution, error handling, and integration with external systems. 

Qualifications  

• BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field preferred; equivalent experience considered. 

• 5+ years of experience in IoT, embedded software, cloud engineering, or related roles, with hands-on responsibility for production systems. 
• Demonstrated delivery of AWS-connected device solutions spanning embedded Linux development, secure device lifecycle management, cloud integration, and production operations. 

Additional experience we value  

• Hailo AI processors and accelerators (Hailo-8, Hailo-10H, Hailo-15), including HailoRT, the Dataflow Compiler, and HEF artifacts. 

• Microchip PolarFire SoC, including the VectorBlox SDK, VNNX artifacts, and the PolarFire security features. 

• Hardware-backed device identity and key storage, including TPMs and secure elements such as Microchip ATECC608 or TA100, and approaches for devices with limited hardware key protection. 

• Familiarity with EU Cyber Resilience Act requirements for security updates, vulnerability handling, and software bills of materials (SBOMs). 

• Other IoT platforms, such as Avnet IoTConnect, and migration between IoT platforms. 
• FPGA fundamentals, including secure bitstream packaging, deployment, compatibility validation, and recovery. 

Travel required  

• Travel typically 5% or less a year  

Equal Employment Opportunity  

Redapt is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws. All employment is decided based on qualifications, merit, and business need.