Senior System Engineer - AWS IAM, Python and Agentic AI

EPAM Systems; Maharashtra; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

EPAM Systems is seeking a Senior System Engineer with deep expertise in AWS IAM, Python, and agentic AI to architect and secure next-generation AI systems. You will design secure-by-design controls for agentic mesh AI environments and govern multi-account AWS landscapes with policy-aware AI agents within defined security boundaries.

Responsibilities include implementing bedrock-based controls, enabling cross-team collaboration, and communicating complex security concepts clearly.

Qualifications

• 5-8 years IT experience with 5+ years in system engineering & cloud security.
• Expertise in AWS IAM, AWS Security Hub, and GuardDuty.
• Proficiency in Python for automation & security tooling.
• Experience with Amazon Bedrock AgentCore and AI Agents Frameworks.

Responsibilities

• Design secure-by-design controls for agentic mesh AI systems on Amazon Bedrock.
• Define trust boundaries between autonomous AI agents and services.
• Assess risks like prompt injection and agent-to-agent trust.
• Enforce security controls using AWS Security Hub, GuardDuty, Config & CloudTrail.
• Collaborate with AI engineers and governance stakeholders to align security architecture.

Skills

AWS IAM

Python

Bedrock AgentCore

AWS Security Hub

Security governance

Tools

AWS GuardDuty

Config

CloudTrail

VPC design

Organizations

Job description

We are seeking a Senior System Engineer with deep expertise in AWS IAM, Python, and Agentic AI to architect and secure next-generation AI systems. In this role, you will design secure-by-design controls for agentic mesh AI environments, govern multi-account AWS landscapes, and enable policy-aware AI agents operating within defined security and compliance boundaries.

Responsibilities

• Design and implement secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock
• Define trust boundaries between autonomous AI agents and services
• Assess and mitigate risks related to prompt injection, model misuse, and agent-to-agent trust and verification
• Address data leakage and cross-agent contamination concerns across AI workloads
• Enable policy-aware AI agents that operate within defined security and compliance constraints
• Apply network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls
• Architect and govern multi-account AWS environments leveraging Organizations and Control Tower
• Implement account isolation strategies for AI workloads, data, and agent execution
• Enforce security controls using AWS Security Hub, GuardDuty, Config, and CloudTrail
• Collaborate across AI engineers, cloud teams, and governance stakeholders to align on security architecture
• Produce strong architectural documentation and communicate complex security concepts clearly

Requirements

• 5-8 years of general IT experience, including 5+ years of professional experience in system engineering and cloud security
• Expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub
• Proficiency in Python for automation and security tooling
• Background in Amazon Bedrock AgentCore and AI Agents Frameworks
• Knowledge of AI & ML Strategy with focus on secure deployment patterns
• Skills in multi-account AWS governance using Organizations and Control Tower
• Familiarity with AWS security services, including GuardDuty, Config, and CloudTrail
• Understanding of network security patterns for AI workloads, including VPC design and private endpoints
• Capability to act as a structured thinker with a security-first mindset and strong communication skills
• Proficient communication skills in English (B2 level or higher)

Nice to have

• Understanding of agentic AI concepts and design principles
• Familiarity with multi-agent systems architecture
• Knowledge of tool-using and autonomous agents