AWS Al / IoT Architect

Redapt•Las Vegas, NV

10d

About The Position

Redapt Inc. is seeking a Senior AWS IoT Architect to join its Cloud Solutions team. This hands-on role builds and operates secure, multi-tenant IoT platforms on AWS, connecting embedded Linux devices and edge AI hardware to cloud services, and develops generative AI solutions on AWS using Amazon Bedrock. The role spans implementation from device provisioning and on-device software through cloud integration, over-the-air updates, and fleet operations. The architect works with cloud, embedded, and hardware teams and validates solutions using simulated fleets and physical development boards. The work includes AWS IoT device lifecycle and fleet management; Greengrass v2 development; Bedrock AI applications, retrieval-augmented generation, and agents; embedded Linux software and board images; secure OTA pipelines; telemetry systems; and fleet-scale testing and device security. Travel is typically 5% or less per year.

Requirements

Strong Python and software engineering skills, including API development, automated testing, debugging, code review, and maintainable application design.
Knowledge and experience with AWS IoT Device Management and AWS IoT Device Defender, including fleet indexing, secure tunneling, and audit checks.
Knowledge and experience developing tenant-aware AWS backend workflows with Lambda, Step Functions, EventBridge, and DynamoDB partition design for multi-tenant data, with tenant-scoped IAM and IoT policies.
Practical experience with RAG, embeddings, vector stores, retrieval quality, and grounding responses in enterprise data, including Amazon Bedrock Knowledge Bases.
Experience building agent workflows and tool calling, with schema validation, controlled execution, error handling, and integration with external systems.
BS or MS in Computer Science, Computer Engineering, Electrical Engineering, or a related field preferred; equivalent experience considered.
At least 5 years of experience in IoT, embedded software, cloud engineering, or related roles, with hands-on responsibility for production systems.
Demonstrated delivery of AWS-connected device solutions spanning embedded Linux development, secure device lifecycle management, cloud integration, and production operations.

Nice To Haves

Experience with Hailo AI processors and accelerators (Hailo-8, Hailo-10H, Hailo-15), including HailoRT, the Dataflow Compiler, and HEF artifacts.
Experience with Microchip PolarFire SoC, including the VectorBlox SDK, VNNX artifacts, and PolarFire security features.
Experience with hardware-backed device identity and key storage, including TPMs and secure elements such as Microchip ATECC608 or TA100, and approaches for devices with limited hardware key protection.
Familiarity with EU Cyber Resilience Act requirements for security updates, vulnerability handling, and software bills of materials (SBOMs).
Familiarity with other IoT platforms, such as Avnet IoTConnect, and migration between IoT platforms.
Knowledge of FPGA fundamentals, including secure bitstream packaging, deployment, compatibility validation, and recovery.

Responsibilities

Design and implement AWS IoT Core solutions for device onboarding, connectivity, identity, fleet management, and tenant isolation, using per-device X.509 certificates, mutual TLS, fleet provisioning with claim certificates, certificate revocation, and AWS Private CA.
Develop AWS IoT Greengrass v2 components, recipes, and deployments for Java nucleus and nucleus lite, including resource-constrained devices and recovery and state-management behavior.
Design, develop, test, and deploy AI applications using Amazon Bedrock foundation models and AWS services, including model invocation, inference settings, and AWS SDK integrations.
Build RAG solutions using Amazon Bedrock Knowledge Bases or custom retrieval pipelines, including ingestion, chunking, embeddings, vector stores and search, retrieval quality, grounding in enterprise data, and source citations.
Implement AI agents and tool integrations for enterprise APIs and workflows, with schema validation, controlled execution, error handling, explicit permissions, and human approval where needed.
Develop prompts and structured extraction workflows for document understanding, classification, summarization, and business process automation.
Build Python services and APIs that integrate AI capabilities with customer applications, databases, and enterprise data sources.
Create representative evaluation datasets and automated tests to measure accuracy, grounding, extraction quality, and agent task completion, and validate changes before release.
Implement layered AI safeguards using Amazon Bedrock Guardrails, IAM, encryption, data access controls, output validation, and prompt-injection protections.
Build on-device agents in Python and C/C++ for embedded Linux; build board images with Yocto; integrate systemd services; and cross-compile and package software for Arm and other embedded targets.
Implement secure OTA pipelines for applications, models, and supported firmware, including signed manifests, pre-installation verification, staged rollout, health checks, recovery, rollback, and anti-rollback controls.
Manage static and dynamic thing groups and AWS IoT Jobs, including rollout rates, abort thresholds, retries, and fleet deployment status.
Build MQTT telemetry pipelines, topic structures, versioned message schemas, and IoT rules routing data to streaming services and Amazon S3, including buffering, reconnect behavior, and duplicate-message handling.
Test at fleet scale with containerized device simulators and real-board lab testing, covering load, connectivity, provisioning, OTA, and recovery; diagnose connectivity, interrupted updates, power-loss recovery, security, and device performance issues.
Apply device security practices, including secure boot, debug-port lockdown, least-privilege IoT policies, and hardware-backed keys where supported.
Travel typically 5% or less per year.