Lead System Engineer - AWS IAM, Python and Agentic AI

EPAM Systems; Chennai District; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

EPAM Systems in Chennai seeks a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define strategy and architect secure AI systems at enterprise scale.

You will lead secure-by-design controls, governance across multi-account AWS landscapes, and mentor engineers while shaping engineering standards and communicating security concepts to senior stakeholders.

Qualifications

• Deep expertise in AWS IAM and AWS Security services.
• Advanced Python for automation and tooling.
• Experience with Amazon Bedrock and AI agent frameworks.
• Experience designing secure, enterprise-scale AWS environments.
• Strong ability to mentor engineers and drive security governance.

Responsibilities

• Lead architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock.
• Define and own trust boundaries between autonomous AI agents and services across the enterprise.
• Drive risk assessment and mitigation for prompt injection and model misuse.
• Establish strategies to prevent data leakage and cross-agent contamination.
• Define the roadmap for policy-aware AI agents under security constraints.
• Set standards for network security patterns including VPCs and private endpoints.
• Govern multi-account AWS environments using AWS Organizations and Control Tower.
• Oversee account isolation strategies for AI workloads and data.
• Establish enforcement frameworks with AWS Security Hub, GuardDuty, Config and CloudTrail.
• Lead cross-functional collaboration with AI engineers and governance stakeholders.
• Mentor senior engineers and communicate complex security concepts to executives.
• Contribute to pre-sales activities and strategic initiatives as a subject matter expert.

Skills

AWS IAM

AWS Security Hub

Python

Amazon Bedrock

AgentCore

AI Agents Frameworks

Security by design

Multi-account AWS

AWS Organizations

Control Tower

VPC design

GuardDuty

Config

CloudTrail

English Proficiency

Job description

We are looking for a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define the strategic direction and architect next-generation secure AI systems at enterprise scale. In this role, you will lead the design of secure-by-design controls for agentic mesh AI environments, establish governance frameworks across multi-account AWS landscapes, and drive the adoption of policy-aware AI agents operating within defined security and compliance boundaries. You will also mentor engineers, shape engineering standards, and act as a trusted advisor to senior stakeholders.

Responsibilities

• Lead the architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock
• Define and own trust boundaries between autonomous AI agents and services across the enterprise
• Drive the assessment and mitigation of risks related to prompt injection, model misuse, and agent-to-agent trust and verification
• Establish enterprise-wide strategies to address data leakage and cross-agent contamination across AI workloads
• Define the vision and roadmap for policy-aware AI agents operating within security and compliance constraints
• Set standards for network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls
• Architect, govern, and continuously evolve multi-account AWS environments leveraging Organizations and Control Tower
• Define and oversee account isolation strategies for AI workloads, data, and agent execution
• Establish enforcement frameworks using AWS Security Hub, GuardDuty, Config, and CloudTrail
• Lead cross-functional collaboration with AI engineers, cloud teams, and governance stakeholders to align on security architecture and drive consensus on key decisions
• Mentor and coach senior and mid-level engineers, fostering technical growth and a security-first culture
• Represent the engineering organization in executive-level discussions, producing high-quality architectural documentation and communicating complex security concepts to both technical and non-technical audiences
• Contribute to pre-sales activities, technical assessments, and strategic initiatives as a subject matter expert

Requirements

• 8-12 years of general IT experience, including 8+ years of professional experience in system engineering and cloud security
• At least 1 year of relevant leadership experience
• Deep expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub
• Advanced proficiency in Python for automation, security tooling, and framework development
• Strong background in Amazon Bedrock AgentCore and AI Agents Frameworks
• Solid knowledge of AI & ML Strategy with a focus on secure deployment patterns at enterprise scale
• Proven experience designing and governing multi-account AWS environments using Organizations and Control Tower
• Hands-on expertise with AWS security services, including GuardDuty, Config, and CloudTrail
• Strong understanding of network security patterns for AI workloads, including VPC design and private endpoints
• Demonstrated ability to lead architectural decisions, mentor engineers, and influence stakeholders across organizational boundaries
• Structured thinker with a security-first mindset, strong leadership presence, and excellent communication skills
• Written and spoken proficiency in English (B2 level or higher)

Nice to have

• Deep understanding of agentic AI concepts and design principles
• Hands-on experience with multi-agent systems architecture