Lead System Engineer - AWS IAM, Python and Agentic AI

EPAM Systems; Hyderabad; Hybrid; INR 3,000,000 - 5,500,000; Full time

Job summary

EPAM Systems is seeking a Lead System Engineer to define the strategic direction for secure, enterprise-scale AI systems. You will architect secure-by-design controls for agentic mesh AI and govern multi-account AWS environments, while mentoring engineers and influencing senior stakeholders.

You will drive policy-aware AI agent strategies, establish trusted collaboration across cloud teams, and ensure security and compliance are embedded in every decision.

Qualifications

• 8-12 years IT experience, incl. cloud security
• At least 1 year of leadership experience
• Deep expertise in AWS IAM, AWS Security Hub
• Advanced Python for automation and tooling
• Strong background with Bedrock AgentCore and AI agents
• Knowledge of AI/ML deployment patterns at scale
• Experience governing multi-account AWS environments
• Hands-on AWS security services: GuardDuty, Config, CloudTrail
• Strong network security pattern knowledge: VPC design, private endpoints
• Proven ability to lead architectural decisions and mentor teams

Responsibilities

• Lead architecture and implementation of secure-by-design AI controls on AWS Bedrock
• Define trust boundaries between autonomous AI agents and services
• Assess and mitigate prompt injection, model misuse, and agent-to-agent trust risks
• Shape enterprise data leakage and cross-agent contamination strategies
• Establish policy-aware AI agents within security constraints
• Set security standards for AI workloads and network patterns
• Govern multi-account AWS environments using Organizations and Control Tower
• Define account isolation strategies for AI workloads and data
• Enforce controls via AWS Security Hub, GuardDuty, Config, CloudTrail
• Collaborate with AI engineers, cloud teams, and governance stakeholders
• Mentor engineers and promote security-first culture
• Represent engineering in exec discussions with architectural doc output
• Contribute to pre-sales, technical assessments, and strategic initiatives

Skills

AWS IAM

Bedrock AgentCore

Python

Agentic AI

Multi-account AWS

Security architecture

Leadership

Mentoring

Communication

English (B2+)

Tools

AWS Security Hub

GuardDuty

Config

CloudTrail

Organizations

Control Tower

VPC design

Private endpoints

Bedrock access controls

Job description

We are looking for a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define the strategic direction and architect next-generation secure AI systems at enterprise scale. In this role, you will lead the design of secure-by-design controls for agentic mesh AI environments, establish governance frameworks across multi-account AWS landscapes, and drive the adoption of policy-aware AI agents operating within defined security and compliance boundaries. You will also mentor engineers, shape engineering standards, and act as a trusted advisor to senior stakeholders.

Responsibilities

• Lead the architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock
• Define and own trust boundaries between autonomous AI agents and services across the enterprise
• Drive the assessment and mitigation of risks related to prompt injection, model misuse, and agent-to-agent trust and verification
• Establish enterprise-wide strategies to address data leakage and cross-agent contamination across AI workloads
• Define the vision and roadmap for policy-aware AI agents operating within security and compliance constraints
• Set standards for network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls
• Architect, govern, and continuously evolve multi-account AWS environments leveraging Organizations and Control Tower
• Define and oversee account isolation strategies for AI workloads, data, and agent execution
• Establish enforcement frameworks using AWS Security Hub, GuardDuty, Config, and CloudTrail
• Lead cross-functional collaboration with AI engineers, cloud teams, and governance stakeholders to align on security architecture and drive consensus on key decisions
• Mentor and coach senior and mid-level engineers, fostering technical growth and a security-first culture
• Represent the engineering organization in executive-level discussions, producing high-quality architectural documentation and communicating complex security concepts to both technical and non-technical audiences
• Contribute to pre-sales activities, technical assessments, and strategic initiatives as a subject matter expert

Requirements

• 8-12 years of general IT experience, including 8+ years of professional experience in system engineering and cloud security
• At least 1 year of relevant leadership experience
• Deep expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub
• Advanced proficiency in Python for automation, security tooling, and framework development
• Strong background in Amazon Bedrock AgentCore and AI Agents Frameworks
• Solid knowledge of AI & ML Strategy with a focus on secure deployment patterns at enterprise scale
• Proven experience designing and governing multi-account AWS environments using Organizations and Control Tower
• Hands-on expertise with AWS security services, including GuardDuty, Config, and CloudTrail
• Strong understanding of network security patterns for AI workloads, including VPC design and private endpoints
• Demonstrated ability to lead architectural decisions, mentor engineers, and influence stakeholders across organizational boundaries
• Structured thinker with a security-first mindset, strong leadership presence, and excellent communication skills
• Written and spoken proficiency in English (B2 level or higher)

Nice to have

• Deep understanding of agentic AI concepts and design principles
• Hands-on experience with multi-agent systems architecture