Lead System Engineer - AWS IAM, Python and Agentic AI

EPAM Systems; Gurugram District; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

EPAM Systems is seeking a Lead System Engineer in India to define strategic direction and architect secure AI systems at enterprise scale. You will lead secure-by-design controls for agentic mesh AI environments and govern multi-account AWS landscapes.

You will mentor engineers, shape engineering standards, and advise senior stakeholders while ensuring compliance and robust security practices across Bedrock-based AI workloads.

Qualifications

• 8-12 years of general IT experience, including 8+ years in system engineering and cloud security.
• At least 1 year of leadership experience.
• Deep expertise in AWS IAM, AWS Security Hub, and GuardDuty.
• Advanced Python for automation and tooling.
• Strong knowledge of Amazon Bedrock AgentCore and AI Agents Frameworks.

Responsibilities

• Lead architecture and implementation of secure-by-design controls for agentic mesh AI systems on Bedrock.
• Define trust boundaries between autonomous AI agents and services.
• Drive risk assessment and mitigation for prompt injection and model misuse.
• Establish enterprise strategies to address data leakage and cross-agent contamination.
• Define roadmap for policy-aware AI agents within security and compliance constraints.
• Set standards for AI workload network security patterns (VPCs, private endpoints).
• Govern multi-account AWS environments using Organizations and Control Tower.
• Oversee account isolation strategies for AI workloads and data.
• Establish enforcement frameworks using AWS Security Hub and CloudTrail.
• Lead cross-functional collaboration with AI engineers and governance stakeholders.
• Mentor engineers and communicate architectural decisions to executives.

Skills

AWS IAM

Python

Leadership

Communication

Security architecture

Tools

Amazon Bedrock

AWS Security Hub

GuardDuty

Config

CloudTrail

AWS Organizations

Control Tower

Job description

We are looking for a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define the strategic direction and architect next-generation secure AI systems at enterprise scale. In this role, you will lead the design of secure-by-design controls for agentic mesh AI environments, establish governance frameworks across multi-account AWS landscapes, and drive the adoption of policy-aware AI agents operating within defined security and compliance boundaries. You will also mentor engineers, shape engineering standards, and act as a trusted advisor to senior stakeholders.

Responsibilities

• Lead the architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock
• Define and own trust boundaries between autonomous AI agents and services across the enterprise
• Drive the assessment and mitigation of risks related to prompt injection, model misuse, and agent-to-agent trust and verification
• Establish enterprise-wide strategies to address data leakage and cross-agent contamination across AI workloads
• Define the vision and roadmap for policy-aware AI agents operating within security and compliance constraints
• Set standards for network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls
• Architect, govern, and continuously evolve multi-account AWS environments leveraging Organizations and Control Tower
• Define and oversee account isolation strategies for AI workloads, data, and agent execution
• Establish enforcement frameworks using AWS Security Hub, GuardDuty, Config, and CloudTrail
• Lead cross-functional collaboration with AI engineers, cloud teams, and governance stakeholders to align on security architecture and drive consensus on key decisions
• Mentor and coach senior and mid-level engineers, fostering technical growth and a security-first culture
• Represent the engineering organization in executive-level discussions, producing high-quality architectural documentation and communicating complex security concepts to both technical and non-technical audiences
• Contribute to pre-sales activities, technical assessments, and strategic initiatives as a subject matter expert

Requirements

• 8-12 years of general IT experience, including 8+ years of professional experience in system engineering and cloud security
• At least 1 year of relevant leadership experience
• Deep expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub
• Advanced proficiency in Python for automation, security tooling, and framework development
• Strong background in Amazon Bedrock AgentCore and AI Agents Frameworks
• Solid knowledge of AI & ML Strategy with a focus on secure deployment patterns at enterprise scale
• Proven experience designing and governing multi-account AWS environments using Organizations and Control Tower
• Hands-on expertise with AWS security services, including GuardDuty, Config, and CloudTrail
• Strong understanding of network security patterns for AI workloads, including VPC design and private endpoints
• Demonstrated ability to lead architectural decisions, mentor engineers, and influence stakeholders across organizational boundaries
• Structured thinker with a security-first mindset, strong leadership presence, and excellent communication skills
• Written and spoken proficiency in English (B2 level or higher)

Nice to have

• Deep understanding of agentic AI concepts and design principles
• Hands-on experience with multi-agent systems architecture