GenAI Engineering Lead

We're looking for a senior Platform engineer for GenAI Infrastructure to help build and operate the platform behind our agentic systems on AWS. The role covers how we deploy, secure, and run solutions- pipelines, infrastructure-as-code, IAM, networking, and the supporting data stores that our AI agents rely on. This role partners with our existing DevOps team and focuses on GenAI platform. This is a hands-on role on an existing platform. The work involves coming in, understanding what's there, and making it more secure, more reliable, and easier for AI teams to build on. Responsibilities: Work with architects and developers to deploy GenAI components (Bedrock, AgentCore, Lambda, APIs) safely and repeatably and able to troubleshoot. Build and improve CI/CD pipelines and infrastructure code (AWS CDK, Bitbucket/GitHub pipelines). Manage AWS environments end-to-end for GenAI: IAM, networking, deployments, secrets, logging, and monitoring. Evolve secure GenAI deployment architecture where shared infrastructure (Bedrock access, agent runtimes, gateways, graph databases, Redis Database) is provisioned centrally and consumed. Support the data stores our agents depend on - primarily a graph database and vector database. Provisioning, securing, backing up, and troubleshooting them in partnership with platform and infrastructure team. Partner with the existing DevOps and InfoSec teams to harden deployment flows and document secure GenAI platform standards. Ability to quickly assess an existing platform, identify gaps, and ship practical improvements and write clear runbooks and docs so the rest of the team can operate what gets built. Qualifications: 7+ years in DevOps, platform, or cloud infrastructure engineering. Strong AWS background, including IAM, CloudFormation, Lambda, API Gateway, VPC, CloudWatch, SSM, Secrets Manager, and ECR. Hands-on experience with AWS CDK, or strong CloudFormation/Terraform/CDK . CI/CD pipeline experience in Bitbucket Pipelines, GitHub Actions, or similar including OIDC-based authentication Solid IAM and security fundamentals - least-privilege policies, role assumption, trust policies. Experience with containers and ECR for build and deploy workflows. Comfort operating at least one database or data store in production - provisioning, backups, access control, basic tuning. Preferred Qualifications: Experience with AWS Bedrock, AgentCore, or any GenAI/LLM platform work. Experience operating Neo4j, Neptune, or another graph database. Experience operating VectorDB (Redis, Milvus or self-managed). Experience with private networking patterns (VPC endpoints, private subnets) for Lambda or containerized workloads. Experience supporting regulated or security-sensitive environments. The base salary range for this position is $160,000 - $200,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit’s incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies. About Bessemer Trust Bessemer Trust is a family office, overseeing more than $250 billion in assets for over 3,000 individuals and families of substantial wealth. Its more than 1,300 employees are singularly focused on private wealth management — disciplined investment management, sophisticated wealth planning, comprehensive family office services, and highly personalized client service. Established in 1907 as the family office for Annie and Henry Phipps, Bessemer Trust is in its seventh generation of ownership by the Phipps family. As a self-made entrepreneur, Henry Phipps was a founding partner and chief financial officer of Carnegie Steel. Bessemer Trust retains its original focus as a privately owned and independent wealth manager deeply committed to its mission of providing peace of mind to its clients. Bessemer’s adherence to putting clients’ interests first, fiduciary mindset, and highly collaborative culture are at the heart of everything the firm does. Key Facts: For 119 years, Bessemer Trust has operated continuously in a single line of business, independently owned by one family. Headquartered in New York’s Rockefeller Center, Bessemer Trust has 22 offices in total. Woodbridge, NJ, is one of the firm’s largest offices, which hosts a wide range of technology and operations professionals. In addition to its sizable presence in New York and Woodbridge, the firm provides client service through offices in Atlanta, Boston, Chicago, Dallas, Delaware, Denver, Garden City, Grand Cayman, Greenwich, Houston, Los Angeles, Miami, Naples, Nevada, Palm Beach, San Diego, San Francisco, Seattle, Stuart, and Washington, D.C. To watch a video about Bessemer Trust’s history, click here . To learn more about Bessemer Trust, click here . About Our Employee Rewards and Benefits: We provide exceptional rewards and benefits that are among the best in the industry, giving our people access to a wide range of options, including: Competitive base salary plus discretionary annual bonus for select positions A 401(k) plan with a generous annual profit-sharing contribution Personalized development and career opportunities, including tuition reimbursement support Comprehensive medical, dental, and vision plans with zero contributions for employee coverage Employee assistance (EAP) and wellness programs Hybrid work environment: 60% in office, 40% remote for most positions Paid time off and paid parental leave Employer-paid life insurance and short- and long-term disability coverage Legal services and financial wellness plans at no cost to employees Bessemer Trust is committed to creating a diverse and inclusive environment and is proud to be an equal opportunity employer. We encourage candidates of diverse backgrounds to apply.