Security Engineer (Aws Bedrock Agentcore / AI Security)
Expert In Recruitment SolutionsLos Angeles, CA
Overview
Remote
On-site
Job Description
Our client is seeking a Security Engineer to design and implement secure identity, authentication, and authorization solutions for Amazon Bedrock AgentCore and enterprise AI applications. You will architect fine-grained access controls, develop IAM policy templates, and deploy Cedar authorization policies to enable secure AI agent interactions with enterprise systems and external APIs.Responsibilities & Qualifications
- Design and implement secure identity and authentication solutions using Amazon Bedrock AgentCore Identity, including OAuth 2.0, OIDC, JWT-based, and AWS IAM-based authentication mechanisms
- Configure inbound and outbound authentication for AI agents accessing enterprise applications, tools, and external APIs; integrate AgentCore Identity with providers such as Amazon Cognito, Microsoft Entra ID, or Okta
- Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure; implement role-based access control (RBAC) and least-privilege security principles
- Automate IAM policy deployment using Terraform, CloudFormation, or AWS CDK; integrate policy validation and deployment into CI/CD workflows via GitHub Actions
- Design, author, test, and deploy Cedar authorization policies using Amazon Bedrock AgentCore Policy to enforce fine-grained access controls for AI agents accessing tools through AgentCore Gateway
- Implement security controls and monitoring for enterprise AI agents and Generative AI applications using AWS CloudTrail and CloudWatch for audit logging, access traceability, and security visibility
- Collaborate with infrastructure and application teams to integrate identity, authentication, and authorization solutions into enterprise AI agent deployments
- 6–10 years of experience in cloud security, identity and access management, or related infrastructure security roles
- Expert proficiency in AWS IAM, Bedrock AgentCore Identity, Cedar policy language, and IAM policy templates
- Strong knowledge of OAuth 2.0, OIDC, JWT, RBAC, and ABAC authorization models
- Hands-on experience with infrastructure-as-code tools: Terraform, AWS CloudFormation, and AWS CDK
- Proficiency in Python and CI/CD automation tools, particularly GitHub Actions
- Demonstrated expertise with AWS security services: Secrets Manager, CloudTrail, and CloudWatch
- Familiarity with AgentCore Gateway and fine-grained access control implementations
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Security Engineer (Aws Bedrock Agentcore / AI Security) Jobs at Expert In Recruitment Solutions
What is the work location for this position at Expert In Recruitment Solutions?
This job at Expert In Recruitment Solutions is located in Los Angeles, CA, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at Expert In Recruitment Solutions?
Employer has not shared pay details for this role.
What employment applies to this position at Expert In Recruitment Solutions?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at Expert In Recruitment Solutions?
You can apply for this role at Expert In Recruitment Solutions either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.