Jobs · Engineering · North Carolina

Principal Engineer, AI Platform

Epic Games · Cary, NC · 1 wk ago
EngineeringFull-time

What We Do

We enable Epic’s online services teams to build, deploy, and manage services that are used by more than half a billion players around the world. Our mission is to provide world class tools and platforms to improve the experience of our developers and make it easier, faster, and safer to build, operate, and scale their applications. We operate at massive scale as one of the largest cloud computing users in the world.

What You'll Do

  • Own the end-to-end technical architecture across Epic's AI Infrastructure Platforms — ensuring each platform is coherent with the others and that the integration seams are well-defined
  • Drive architectural decisions for agent identity and workload authorization (SPIFFE/SPIRE, OIDC, token exchange, policy planes), translating security requirements into implementable designs
  • Establish the patterns for how AI agents authenticate, receive credentials, execute tools, and are audited — and hold the bar for correctness across the stack
  • Lead design reviews for new capabilities, evaluate build vs. buy decisions, and surface technical risk before it becomes production risk
  • Design and implement the Cluster API and provider abstractions for EMA — the layer that orchestrators depend on to launch, drive, and recover headless agent runs across Kubernetes, EC2, and other compute backends
  • Evolve Epic's AI MCP Gateway plugin runtime (WASM, gRPC sidecar, subprocess multiplexer) and its gateway security posture as external tool surface area grows
  • Architect Epic's knowledge graph, vector search, and memory consolidation pipeline for org-wide scale — across teams, scopes, and retention horizons
  • Define durability, consistency, and isolation requirements across event-driven architectures (NATS JetStream, Redis) shared by multiple agent platforms
  • Lead the AI NHI Identity proposal from strategy into staffed execution — defining the separation of AI MCP Gateway (human/tool) and (agent identity) and migrating the existing credential vault
  • Hold the standard for credential security across the stack: AES-256-GCM vault, AAD binding, scope isolation, default-deny policy, and audit completeness
  • Work with Epic's security organization to ensure agent-to-service trust models meet enterprise standards
  • Partner with product, ML, and enterprise platform teams to shape how agent capabilities are exposed to Epic's broader engineering organization
  • Mentor senior and staff engineers across the team; conduct technical interviews and raise the hiring bar
  • Write design documents that become the reference architecture for future work, not just approvals for current work

Qualifications

  • 12+ years of software engineering experience, with at least 4 years at staff or principal scope
  • Deep expertise in distributed systems: event-driven architectures, durable execution, service mesh, and multi-tenant platform design
  • Production experience with authentication and authorization infrastructure — OAuth 2.0, OIDC, SPIFFE/SPIRE or equivalent workload identity, token exchange (RFC 8693), and policy engines (OPA, OpenFGA, or comparable)
  • Strong security engineering fundamentals: credential vaulting, secrets management (OpenBao/Vault), audit trail design, and least-privilege access at scale
  • Fluency in at least one compiled, systems-capable language (Go preferred, Rust or C++ acceptable); comfort reading and writing Go microservices is essential given the stack
  • Track record of owning multi-service platform architecture across a full product lifecycle — from design through sustained production operation
  • Exceptional written communication: design documents and architecture reviews that are clear, precise, and influence without authority
  • Experience with LLM-integrated systems: agent orchestration, tool-use frameworks, MCP (Model Context Protocol), or equivalent agent-to-tool middleware
  • Experience with plugin or extension runtime design — WASM sandboxing, gRPC sidecar patterns, subprocess isolation, or comparable capability security models
  • Familiarity with knowledge graph systems (Neo4j or comparable), vector databases, and hybrid retrieval (semantic + keyword + graph), as well as experience operating Kubernetes-based platforms: scheduling, workload identity, sidecar injection, and multi-tenancy isolation

Benefits

  • Pay 100% of the premiums for both you and your dependents for Medical, Dental, a Vision HRA, Long Term Disability, Life Insurance & a 401k with competitive match
  • Roger's robust mental well-being program through Modern Health, which provides free therapy and coaching for employees & dependents
  • Events and company-wide paid breaks throughout the year
  • Unlimited PTO and sick time
  • A paid sabbatical after 7 years of employment

About Us

Epic Games is a leading interactive entertainment company. For over 30 years we've been making award-winning games and engine technology that empowers others to make visually stunning games and 3D content that bring environments to life like never before. Epic's award-winning Unreal Engine technology not only provides game developers the ability to build high-fidelity, interactive experiences for PC, console, mobile, and VR, it is also a tool being embraced by content creators across a variety of industries such as media and entertainment, automotive, and architectural design. As we continue to build our Engine technology and develop remarkable games, we strive to build teams of world-class talent. Like what you hear? Come be a part of something Epic!

Equal Opportunity Employer

Epic Games deeply values diverse teams and an inclusive work culture, and we are proud to be an Equal Opportunity employer. Learn more about our Equal Employment Opportunity (EEO) Policy here.

Similar jobs

Principal Engineer - AI Platform

Berkley Technology ServicesWilmington, Delaware, United States· 2 mo ago
Information Technologyapply on careers-berkley.icims.com