Our client is seeking a Security Engineer to design and implement secure identity, authentication, and authorization solutions for Amazon Bedrock AgentCore and enterprise AI applications. You will architect fine-grained access controls, develop IAM policy templates, and deploy Cedar authorization policies to enable secure AI agent interactions with enterprise systems and external APIs. Responsibilities & Qualifications
Design and implement secure identity and authentication solutions using Amazon Bedrock AgentCore Identity, including OAuth 2.0, OIDC, JWT-based, and AWS IAM-based authentication mechanisms
Configure inbound and outbound authentication for AI agents accessing enterprise applications, tools, and external APIs; integrate AgentCore Identity with providers such as Amazon Cognito, Microsoft Entra ID, or Okta
Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure; implement role-based access control (RBAC) and least-privilege security principles
Automate IAM policy deployment using Terraform, CloudFormation, or AWS CDK; integrate policy validation and deployment into CI/CD workflows via GitHub Actions
Design, author, test, and deploy Cedar authorization policies using Amazon Bedrock AgentCore Policy to enforce fine-grained access controls for AI agents accessing tools through AgentCore Gateway
Implement security controls and monitoring for enterprise AI agents and Generative AI applications using AWS CloudTrail and CloudWatch for audit logging, access traceability, and security visibility
Collaborate with infrastructure and application teams to integrate identity, authentication, and authorization solutions into enterprise AI agent deployments
Requirements
6–10 years of experience in cloud security, identity and access management, or related infrastructure security roles
Expert proficiency in AWS IAM, Bedrock AgentCore Identity, Cedar policy language, and IAM policy templates
Strong knowledge of OAuth 2.0, OIDC, JWT, RBAC, and ABAC authorization models
Hands-on experience with infrastructure-as-code tools: Terraform, AWS CloudFormation, and AWS CDK
Proficiency in Python and CI/CD automation tools, particularly GitHub Actions
Demonstrated expertise with AWS security services: Secrets Manager, CloudTrail, and CloudWatch
Familiarity with AgentCore Gateway and fine-grained access control implementations
Numbers & Facts
Location
LA, CA
Skills
Access Controlunmatched
Amazon Web Services (AWS)unmatched
Application Programming Interface (API)unmatched
Artificial Intelligence (AI)unmatched
Artificial Intelligence (AI) Agentsunmatched
Authenticationunmatched
Automationunmatched
Cloud Computingunmatched
Continuous Deployment/Deliveryunmatched
Continuous Integrationunmatched
Enterprise Applicationsunmatched
GitHubunmatched
Identity Data Managementunmatched
Microsoft Product Familyunmatched
OAuthunmatched
Policy Developmentunmatched
Protective Servicesunmatched
Python Programming/Scripting Languageunmatched
Security Designunmatched
Security Monitoringunmatched
Test Plan/Scheduleunmatched
Traceabilityunmatched
🎯
Be found by employers
5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.