<h2><strong>About Avon AI</strong></h2> <p>Avon AI is the management and control platform for enterprise conversational AI. Enterprises are deploying AI agents faster than they can govern them — Avon AI gives them one place to manage those agents and the knowledge behind them: continuous quality monitoring of real conversations, proactive testing and simulation before changes ship, knowledge-base management, and real-time guardrails that can sit inline in the conversation path to block, redact, or correct what an agent says.</p> <p>We are agent-agnostic: Avon AI works with agents our customers built themselves and with third-party agents they only integrate with — across any framework or vendor. Customers run us as SaaS on AWS, or deploy the full platform inside their own private cloud when regulation demands it. We're a small, fast-moving team with offices in Tel Aviv, working with enterprise customers in finance, healthcare, insurance, travel, and more.</p> <p><strong>About the Role </strong></p> <p>We're looking for a DevOps / Platform Engineer to own our infrastructure end to end- both sides of it.</p> <p>Side one is our multi-tenant SaaS on AWS: you build it, you run it, you keep it fast, secure, and up. Side two is the part that makes this role unusual — our enterprise customers deploy Avon AI inside their cloud (and sometimes fully air-gapped, on-prem environments). You'll own that too: packaging the platform, running the installation with the customer's infrastructure and security teams, and being the person on the call when their environment doesn't look like anyone's reference architecture.</p> <p>This is a customer-facing engineering role. You'll be in rooms with enterprise IT, security, and platform teams- walking them through our architecture, answering security review questions, and unblocking deployments. If you want a pure behind-the-scenes infra job, this isn't it. If you like owning infrastructure <em>and</em> being the trusted technical voice in front of a customer, read on.</p> <p>You'll be our first dedicated DevOps hire, which means you inherit real systems in production and a lot of room to shape how they evolve.</p> <p><strong>Key Responsibilities</strong></p> <ul> <li>EKS, networking, data stores, CI/CD, cost, and uptime. Build and evolve it with Infrastructure as Code.</li> <li>Maintain and improve our Helm charts and container distribution so Avon AI installs cleanly in a customer's Kubernetes cluster.</li> <li>Plan and execute installations in customers' private clouds and on-prem/air-gapped environments, working hands-on with their infrastructure teams from kickoff through go-live.</li> <li>Support security reviews and architecture discussions, and translate enterprise IT constraints back into our roadmap.</li> <li>IAM, network segmentation, secrets management, WAF, and the controls enterprise customers audit us on.</li> <li>Metrics, logs, tracing, and alerting for our SaaS, and self-contained monitoring for customers who won't ship telemetry outside their network.</li> <li>CI/CD pipelines, ephemeral PR sandboxes, release automation, and local development so engineers ship quickly and safely.</li> <li>For our SaaS tenants and for deployed customer installations, including on-call ownership of what you build</li> </ul> <p><strong>Requirements</strong></p> <ul> <li>4+ years as a DevOps Engineer, Platform Engineer.</li> <li>Strong hands-on AWS- EKS, EC2, VPC, IAM, S3, Lambda, CloudFormation/CDK, WAF.</li> <li>Deep Kubernetes knowledge- cluster architecture, networking, and real production debugging. Helm authoring is a must, not a nice-to-have: our charts are the product our customers install.</li> <li>Infrastructure as Code- Terraform, CloudFormation, or equivalent, with a real automation mindset.</li> <li>CI/CD ownership- GitHub Actions (preferred), Jenkins, or similar, including release and artifact pipelines.</li> <li>Docker and container packaging- multi-service images, registries, and distribution to environments you don't control.</li> <li>Strong scripting and automation- Python and Bash.</li> <li>Monitoring and observability- Prometheus, Grafana, OpenTelemetry, DataDog, Coralogix, CloudWatch, or similar.</li> <li>Excellent English, written and spoken, and genuine customer-facing skills — you can lead a technical call with an enterprise customer's infra and security team, explain an architecture clearly, and stay calm when a deployment is blocked.</li> <li>Proven track record running highly available, production-grade, service-oriented systems.</li> </ul> <p><strong>Our Pagaya Team</strong></p> <p><span style="font-weight: 400;">Pagaya was founded in 2016 by seasoned research, finance, and technology entrepreneurs, and we are now 500+ strong in New York, Los Angeles, and Tel Aviv.</span></p> <p><span style="font-weight: 400;">We move fast and smart, identifying new opportunities and building end-to-end solutions from AI models and unique data sources. Every Pagaya team member is solving new and exciting challenges every day in a culture based on partnership, collaboration, and community.</span></p> <p><strong>Join a team of builders who are working every day to enable better outcomes for our partners and their customers.</strong></p> <p><strong>Our Values</strong></p> <p><span style="font-weight: 400;">Our values are at the heart of everything we do. We believe great solutions ar