Trustethica Hiring! Full Time Deployment Engineer in Federal Territory - Ricebowl

About Trustethica

Trustethica is a purpose-driven contextual governance platform for enterprise AI, ensuring that AI systems operate in line with authorized business objectives. Trustethica helps organizations manage enterprise AI risk, maintain compliance, and build stakeholder trust.

Role Description

Contractor, primarily remote, working within the Client’s AWS account via scoped, temporary IAM access with up to five (5) days of on-site in Kuala Lumpur for go-live. Effort is approximately two (2) to three (3) weeks, scoped to the deliverables below.

Key responsibilities

The deployment topology and runbook are designed by Trustethica's technical lead, who supports the engagement remotely. A detailed step-by-step runbook and release already exist. This Contractor role executes against that design and delivers the following:

1. Provision and configure the platform from inside the client's AWS account: VPC/subnets, security groups, IAM, KMS, instance selection and sizing.
2. Deploy and configure the services (binaries/containers; system or ECS as applicable), TLS termination, secrets management, structured logging.
3. Stand up and validate the on-instance ML and model artifacts; right-size compute for inference latency/throughput; confirm no inference traffic leaves the client environment.
4. Configure connectors/integrators and the SDK against the client's systems, per the runbook.
5. Validate the zero data-egress posture and meet the client's security and data-handling requirements: network isolation, encryption in transit/at rest, key management, access and audit logging.
6. Execute the runbook end to end; capture environment-specific config; produce concise as-built notes and a handover pack.
7. Support go-live and the immediate post-go-live window; escalate architecture-level questions to the remote technical lead rather than improvising.

Required skills and experience

1. 5+ years cloud/DevOps with deep AWS: EC2/AMI lifecycle, VPC/networking, IAM, KMS, security groups, CloudWatch.
2. IaC: Terraform and/or CloudFormation.
3. Track record deploying vendor/third-party software into a customer's AWS account.
4. Comfortable with Go services and ML-inference workloads (packaging artifacts, configuring a runtime, sizing compute).
5. Strong Linux, networking, TLS/PKI and secrets-management fundamentals.
6. Clear client-facing communication; disciplined about working to a runbook and escalating appropriately.

Nice to have: AWS Pro certs (Solutions Architect Pro / DevOps Pro); fintech/payments deployment exposure; ECS/EKS; ONNX or similar model-serving runtimes.

Out of scope

1.     Any change to product architecture, topology, or source code (owned/directed by Trustethica).

2.     Product feature development or platform bug-fixing.

3.     Client-side infrastructure unrelated to this deployment.

4.     Ongoing managed support beyond the post-go-live window (separate arrangement if needed).

Definition of done

1.     Provisioned, hardened AWS environment per runbook.

2.     Go services + on-instance ML operational (smoke tests pass).

3.     Connectors/SDK integrated with client systems.

4.     Zero-egress confirmed; client security/data-handling requirements met.

5.     Go-live signed off; as-built notes + handover delivered.

Commercials & terms

1. Fixed fee engagement at RM200/hour rate, paid in two milestones, 50% on environment ready + platform deployed and 50% on go-live sign-off.
2. Completion bonus on a clean go-live.
3. SOW + NDA + IP: all work product (scripts, IaC, configuration, documentation) assigned to Trustethica on creation. Trustethica's platform, AMI, models and runbook remain Trustethica's property. Access is least-privilege, time-boxed, revoked on completion.

Next steps

Email your resume with at least two (2) relevant deployment examples and one (1) reference to ************* Please flag your availability for July and August 2026.

Successful applicants will be contacted within three (3) business days to schedule a technical interview.