EI
Security Engineer (AWS Bedrock AgentCore / AI Security)
Expert In Recruitment Solutions
- 🇺🇸 United States
- Hybrid
- 6 hours ago
- Amazon Bedrock
- AI
- IAM
- OIDC
- JWT
- AWS IAM
- Okta
- RBAC
- Terraform
- CloudFormation
- AWS CDK
- CI/CD
- GitHub Actions
- Machine Learning
- AWS
- CloudTrail
- CloudWatch
- Bedrock
- ABAC
- IaC
- Python
6 hours ago
Our client is seeking aSecurity Engineer to design and implement secure identity, authentication, and authorization solutions for Amazon Bedrock AgentCore and enterprise AI applications. You will architect fine-grained access controls, develop IAM policy templates, and deploy Cedar authorization policies to enable secure AI agent interactions with enterprise systems and external APIs.
Responsibilities & Qualifications
- Design and implement secure identity and authentication solutions using Amazon Bedrock AgentCore Identity, including OAuth 2.0, OIDC, JWT-based, and AWS IAM-based authentication mechanisms
- Configure inbound and outbound authentication for AI agents accessing enterprise applications, tools, and external APIs; integrate AgentCore Identity with providers such as Amazon Cognito, Microsoft Entra ID, or Okta
- Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure; implement role-based access control (RBAC) and least-privilege security principles
- Automate IAM policy deployment using Terraform, CloudFormation, or AWS CDK; integrate policy validation and deployment into CI/CD workflows via GitHub Actions
- Design, author, test, and deploy Cedar authorization policies using Amazon Bedrock AgentCore Policy to enforce fine-grained access controls for AI agents accessing tools through AgentCore Gateway
- Implement security controls and monitoring for enterprise AI agents and Generative AI applications using AWS CloudTrail and CloudWatch for audit logging, access traceability, and security visibility
- Collaborate with infrastructure and application teams to integrate identity, authentication, and authorization solutions into enterprise AI agent deployments
- 6–10 years of experience in cloud security, identity and access management, or related infrastructure security roles
- Expert proficiency inAWS IAM,Bedrock AgentCore Identity,Cedar policy language, and IAM policy templates
- Strong knowledge ofOAuth 2.0,OIDC,JWT,RBAC, andABAC authorization models
- Hands-on experience with infrastructure-as-code tools:Terraform,AWS CloudFormation, andAWS CDK
- Proficiency inPython and CI/CD automation tools, particularlyGitHub Actions
- Demonstrated expertise with AWS security services:Secrets Manager,CloudTrail, andCloudWatch
- Familiarity withAgentCore Gateway and fine-grained access control implementations
Security Engineer (AWS Bedrock AgentCore / AI Security) · Expert In Recruitment Solutions