AWS Al / IoT Architect

Redapt•Las Vegas, NV

11d

About The Position

Redapt Inc. is seeking a Senior AWS IoT Architect to join its Cloud Solutions team. This hands-on role builds and operates secure, multi-tenant IoT platforms on AWS, connects embedded Linux devices and edge AI hardware to cloud services, and builds and deploys generative AI solutions on AWS using Amazon Bedrock. The role owns implementation across device provisioning, on-device software, cloud integration, over-the-air updates, and fleet operations. The architect works with cloud, embedded, and hardware teams to deliver reliable solutions and validate them using simulated fleets and physical development boards. The position includes AWS IoT architecture and fleet operations, embedded Linux and edge AI development, AI application and agent development, retrieval-augmented generation, security and safeguards, OTA deployment, telemetry pipelines, and fleet-scale testing. Travel is typically 5% or less per year.

Requirements

Strong Python and software engineering skills, including API development, automated testing, debugging, code review, and maintainable application design.
Experience with AWS IoT Device Management and AWS IoT Device Defender, including fleet indexing, secure tunneling, and audit checks.
Knowledge and experience developing tenant-aware AWS backend workflows with Lambda, Step Functions, EventBridge, and DynamoDB partition design for multi-tenant data, with tenant-scoped IAM and IoT policies.
Practical experience with RAG, embeddings, vector stores, retrieval quality, and grounding responses in enterprise data, including Amazon Bedrock Knowledge Bases.
Experience building agent workflows and tool calling, with schema validation, controlled execution, error handling, and external-system integration.
BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field preferred; equivalent experience is considered.
5+ years of experience in IoT, embedded software, cloud engineering, or related roles, with hands-on responsibility for production systems.
Demonstrated delivery of AWS-connected device solutions spanning embedded Linux development, secure device lifecycle management, cloud integration, and production operations.

Nice To Haves

Experience with Hailo AI processors and accelerators (Hailo-8, Hailo-10H, Hailo-15), including HailoRT, the Dataflow Compiler, and HEF artifacts.
Experience with Microchip PolarFire SoC, including the VectorBlox SDK, VNNX artifacts, and PolarFire security features.
Experience with hardware-backed device identity and key storage, including TPMs and secure elements such as Microchip ATECC608 or TA100, and approaches for devices with limited hardware key protection.
Familiarity with EU Cyber Resilience Act requirements for security updates, vulnerability handling, and software bills of materials (SBOMs).
Familiarity with other IoT platforms, such as Avnet IoTConnect, and migration between IoT platforms.
Knowledge of FPGA fundamentals, including secure bitstream packaging, deployment, compatibility validation, and recovery.

Responsibilities

Design and implement AWS IoT Core solutions for device onboarding, connectivity, identity, fleet management, and tenant isolation, including X.509 certificates, mutual TLS, fleet provisioning, certificate revocation, and AWS Private CA.
Develop AWS IoT Greengrass v2 components, recipes, and deployments for Java nucleus and nucleus lite, including on resource-constrained devices and with device-appropriate recovery and state management.
Design, develop, test, and deploy AI applications using Amazon Bedrock foundation models and AWS services, including model invocation, inference settings, and AWS SDK integration.
Build RAG solutions using Amazon Bedrock Knowledge Bases or custom retrieval pipelines, covering ingestion, chunking, embeddings, vector stores and search, retrieval quality, enterprise-data grounding, and citations.
Implement AI agents and tool integrations for enterprise APIs and workflows, with schema validation, controlled execution, error handling, explicit permissions, and human approval where needed.
Develop prompts and structured extraction workflows for document understanding, classification, summarization, and business process automation.
Build Python services and APIs integrating AI capabilities with customer applications, databases, and enterprise data sources.
Create evaluation datasets and automated tests for accuracy, grounding, extraction quality, and agent task completion, and validate changes before release.
Implement layered AI safeguards using Amazon Bedrock Guardrails, IAM, encryption, data access controls, output validation, and prompt-injection protections.
Build on-device agents in Python and C/C++ for embedded Linux; build board images with Yocto; integrate systemd services; and cross-compile and package software for Arm and other embedded targets.
Implement secure OTA pipelines for applications, models, and supported firmware, including signed manifests, installation verification, staged rollouts, health checks, failure recovery, rollback, and anti-rollback controls.
Manage static and dynamic thing groups and AWS IoT Jobs, including rollout rates, abort thresholds, retries, and fleet deployment status.
Build MQTT telemetry pipelines, topic structures, versioned message schemas, and IoT rules routing data to streaming services and Amazon S3, including buffering, reconnect behavior, and duplicate-message handling.
Test at fleet scale with containerized device simulators and real-board lab testing, covering load, connectivity, provisioning, OTA, and recovery; diagnose connectivity, interrupted updates, power-loss recovery, security, and device performance issues.
Apply device security practices, including secure boot, debug-port lockdown, least-privilege IoT policies, and hardware-backed keys where supported.