Lead System Engineer – AWS IAM, Python and Agentic AI

Epam Systems; Hyderabad, Pune District, Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Epam Systems in India seeks a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define strategic direction and architect secure AI systems at enterprise scale. You will lead secure-by-design controls across multi-account AWS landscapes, mentor engineers, and collaborate with senior stakeholders to drive governance, standards, and risk mitigation.

Excellent communication and leadership are required.

Qualifications

• 8–12 years IT experience with system engineering and cloud security.
• Leadership experience with cross‑functional teams.
• Deep AWS security services knowledge and practical Python automation.

Responsibilities

• Lead architecture and implementation of secure-by-design controls for agentic AI systems on AWS.
• Define trust boundaries between autonomous AI agents and services.
• Mentor engineers and collaborate with governance stakeholders on security architecture.

Skills

AWS IAM

Python

Security architecture

Leadership

English communication

Tools

Amazon Bedrock

AWS Security Hub

GuardDuty

Config

CloudTrail

Job description

We are looking for a Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to define the strategic direction and architect next-generation secure AI systems at enterprise scale.

In this role, you will lead the design of secure-by-design controls for agentic mesh AI environments, establish governance frameworks across multi-account AWS landscapes, and drive the adoption of policy-aware AI agents operating within defined security and compliance boundaries. You will also mentor engineers, shape engineering standards, and act as a trusted advisor to senior stakeholders.

Read full description

Responsibilities

• Lead the architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock
• Define and own trust boundaries between autonomous AI agents and services across the enterprise
• Drive the assessment and mitigation of risks related to prompt injection, model misuse, and agent-to-agent trust and verification
• Establish enterprise-wide strategies to address data leakage and cross-agent contamination across AI workloads
• Define the vision and roadmap for policy-aware AI agents operating within security and compliance constraints
• Set standards for network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls
• Architect, govern, and continuously evolve multi-account AWS environments leveraging Organizations and Control Tower
• Define and oversee account isolation strategies for AI workloads, data, and agent execution
• Establish enforcement frameworks using AWS Security Hub, GuardDuty, Config, and CloudTrail
• Lead cross-functional collaboration with AI engineers, cloud teams, and governance stakeholders to align on security architecture and drive consensus on key decisions
• Mentor and coach senior and mid-level engineers, fostering technical growth and a security-first culture
• Represent the engineering organization in executive-level discussions, producing high-quality architectural documentation and communicating complex security concepts to both technical and non-technical audiences
• Contribute to pre-sales activities, technical assessments, and strategic initiatives as a subject matter expert

Requirements

• 8-12 years of general IT experience, including 8+ years of professional experience in system engineering and cloud security
• At least 1 year of relevant leadership experience
• Deep expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub
• Advanced proficiency in Python for automation, security tooling, and framework development
• Strong background in Amazon Bedrock AgentCore and AI Agents Frameworks
• Solid knowledge of AI ML Strategy with a focus on secure deployment patterns at enterprise scale
• Proven experience designing and governing multi-account AWS environments using Organizations and Control Tower
• Hands-on expertise with AWS security services, including GuardDuty, Config, and CloudTrail
• Strong understanding of network security patterns for AI workloads, including VPC design and private endpoints
• Demonstrated ability to lead architectural decisions, mentor engineers, and influence stakeholders across organizational boundaries
• Structured thinker with a security-first mindset, strong leadership presence, and excellent communication skills
• Written and spoken proficiency in English (B2 level or higher)

Nice to have

• Deep understanding of agentic AI concepts and design principles
• Hands-on experience with multi-agent systems architecture
• Practical knowledge of tool-using and autonomous agents
• Experience contributing to industry communities, publications, or open-source projects in the AI/cloud security space

Location

Hyderabad, Pune, Bangalore, Gurgaon, Chennai, Coimbatore