Jobs → Engineering → Cloud Security Engineer

About the Role We are looking for an experienced Cloud Security Engineer with expertise in AWS Bedrock AgentCore Security to design, implement, and secure enterprise Agentic AI applications. Key Responsibilities • Design and implement secure identity management using AWS Bedrock AgentCore Identity • Configure authentication for AI agents accessing enterprise applications, APIs, and tools • Implement OAuth 2.0, OpenID Connect (OIDC), JWT, and AWS IAM authentication • Integrate AgentCore Identity with Amazon Cognito, Microsoft Entra ID, or Okta • Implement secure agent-to-agent, agent-to-tool, and agent-to-API communication • Manage secure token handling, credential management, and access delegation IAM & Access Management • Develop reusable AWS IAM policy templates • Configure IAM roles, trust policies, permission boundaries, and resource-based policies • Implement Role-Based Access Control (RBAC) and Least Privilege security • Configure IAM execution roles for AgentCore Runtime and Gateway • Automate IAM deployment using Terraform, CloudFormation, or AWS CDK • Perform IAM audits, access reviews, and policy validation • Troubleshoot authorization and role-assumption issues Cedar Authorization Policies • Design, test, and deploy Cedar authorization policies • Implement fine-grained authorization for AI agents and enterprise tools • Configure policy engines for AgentCore Gateway • Build Attribute-Based Access Control (ABAC) policies • Validate Cedar policies and enforce default-deny authorization • Monitor and troubleshoot authorization decisions