Lead Agent Identity Architect for AI Platform (Remote)

EPAM Systems; Polska; Hybrid; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Health insurance

Employee stock purchase plan

Relocation assistance

Hybrid work model

Job summary

EPAM Systems, Inc. seeks a Lead Agent Identity Engineer to own runtime identity and access control for an Enterprise Agent Development Platform in a cloud-native environment.

You will design and implement On-Behalf-Of token exchanges, scoped identity propagation, and secure token vaulting across agent-to-tool-to-API chains. Work with Cedar/MS Entra claims mapping, enforce identity governance, and contribute to secure enterprise federation using Entra, Okta, or Cognito-like solutions.

Qualifications

• 5+ years in cloud security or identity engineering.

Responsibilities

• Own runtime identity and access control for the Enterprise Agent Development Platform.

Skills

OAuth 2.0

OIDC

JWT

Token exchange

Tools

AgentCore Identity

MS Entra

Job description

EPAM Systems, Inc. seeks a Lead Agent Identity Engineer to own runtime identity and access control for an Enterprise Agent Development Platform in a cloud-native environment.

You will design and implement On-Behalf-Of token exchanges, scoped identity propagation, and secure token vaulting across agent-to-tool-to-API chains. Work with Cedar/MS Entra claims mapping, enforce identity governance, and contribute to secure enterprise federation using Entra, Okta, or Cognito-like solutions.