Senior Platform Engineer

Intellias; Poland; On-site; PLN 260,000 - 380,000; Full time

Job summary

Intellias is seeking a Senior Security Engineer to design and implement security foundations for autonomous AI agents operating in a regulated financial technology environment. The role spans IAM, cloud and on-prem security, IaC, and secure credential workflows.

You will build production-grade Python services and secure automation tooling, with a focus on least-privilege access, secure secret management, and auditable access patterns across Terraform, Ansible, Docker, and Kubernetes.

Qualifications

• Senior security engineer with hands-on production software experience.
• Experience designing agentic AI security and IAM patterns.

Responsibilities

• Design identity and access patterns for autonomous AI agents and services.
• Build IaC-driven security controls and onboarding standards.
• Develop secure credential-management workflows with short-lived credentials.
• Own security patterns for AI agents interacting with enterprise systems.

Skills

Security engineering

IAM design

Python

CI/CD

Cloud security

WAF/AuthN/AuthZ

Tools

Terraform

Ansible

Docker

Kubernetes

GitLab CI

GitHub Actions

Jenkins

Job description

Senior Security Engineer – Agentic AI & Platform Security

About the Client

Our client is a leading global investment management company headquartered in London, managing more than $228 billion in assets and serving institutional investors, pension funds, wealth managers, and other sophisticated clients worldwide.

The organization specializes in quantitative investing, alternative investments, systematic trading strategies, and technology-driven asset management. Data science, machine learning, and artificial intelligence are core components of its investment, research, and technology strategies.

As part of a strategic collaboration, we are supporting two foundational capabilities required to enable safe, scalable, and governed AI adoption across the enterprise:

• Agentic Security
• AI-Ready Data Foundations

Position Overview

We are seeking a Senior Security Engineer to design and build the security foundations required for autonomous AI agents operating across a large, highly regulated financial technology environment.

The runtime security model for agentic AI is still being established. This role will help define how autonomous agents authenticate, obtain appropriately scoped access, interact with enterprise resources, and operate safely without inheriting excessive user privileges or relying on long-lived credentials.

The fundamental challenge is controlling what an AI agent can reach. An agent operating with unrestricted user context or persistent credentials can create an effectively unlimited security blast radius. Your role will be to design and implement the controls that close this gap.

This is a hands-on senior engineering position for a security engineer who remains deeply technical and actively develops production software. You will operate at the intersection of:

• Enterprise Identity & Access Management
• Infrastructure Security
• Infrastructure as Code
• Cloud-native and on-premises infrastructure
• Agentic AI security

You will build IaC-driven, self-service identity patterns, credential flows, security controls, and onboarding standards that make the secure approach the easiest approach for engineering teams.

Key Responsibilities

Platform & Software Engineering

• Design, develop, and maintain production-grade Python services, libraries, APIs, and command-line tooling that form the internal infrastructure platform.
• Extend existing platform capabilities using robust software engineering practices rather than relying on ad-hoc scripts.
• Build reusable abstractions and self-service capabilities for infrastructure and security workflows.
• Develop automated workflows that improve engineering productivity while maintaining strong security controls.

Agentic AI Security & IAM

• Design identity and access patterns for autonomous AI agents, workloads, services, and applications.
• Establish secure authentication and authorization mechanisms for agentic workloads.
• Implement least-privilege and scoped-access models to minimize the potential blast radius of compromised or misbehaving agents.
• Design secure credential and secret-management workflows, with a preference for short-lived and appropriately scoped credentials.
• Develop standards for agent onboarding, identity provisioning, access requests, authorization, and lifecycle management.
• Establish auditable mechanisms for tracking infrastructure and agent access.
• Help define security patterns for AI agents interacting with enterprise systems, services, and data.

Infrastructure & Automation

• Build and maintain Infrastructure as Code using Terraform and Ansible.
• Replace manual infrastructure processes with reproducible, version-controlled, and reviewable workflows.
• Design self-service infrastructure provisioning while ensuring appropriate security guardrails.
• Work with on-premises compute, storage, networking, and virtualization infrastructure.
• Manage and scale infrastructure as platform adoption increases, balancing performance, reliability, security, and cost.
• Build and secure workloads running on Docker and Kubernetes.
• Understand workload scheduling, configuration, resource allocation, service identity, and runtime permissions.
• Implement secure patterns for workload access to infrastructure and enterprise resources.
• Apply appropriate isolation and authorization controls to containerized workloads.

CI/CD & DevOps

• Design and maintain CI/CD pipelines using technologies such as GitLab CI, GitHub Actions, or Jenkins.
• Automate testing, packaging, validation, and deployment of platform components.
• Implement staged rollouts and safe deployment practices.
• Ensure infrastructure and application changes are subject to appropriate testing and peer review.

Observability & Reliability

• Build observability into platform services through metrics, structured logging, tracing, dashboards, and alerting.
• Work with technologies such as Prometheus, Grafana, and OpenTelemetry, or equivalent tooling.
• Use telemetry to diagnose complex distributed-system failures.
• Own production incidents from initial triage through root-cause analysis and permanent remediation.
• Ensure recurring issues result in engineering or configuration changes that prevent future incidents.

Security by Default

• Embed security controls directly into the platform so consuming engineering teams inherit secure defaults automatically.
• Implement and maintain:
• Secrets management
• Identity and access controls
• Network isolation
• Dependency and supply-chain security
• Identify security risks such as overly broad permissions, unpinned dependencies, exposed credentials, and insecure infrastructure configurations.

Engineering Collaboration

• Partner with engineering teams to understand their workflows, challenges, and infrastructure requirements.
• Translate recurring engineering pain points into reusable platform capabilities.
• Gather requirements and convert them into clear technical designs.
• Write documentation, standards, and onboarding guidance that teams can independently follow.
• Explain architectural and security decisions clearly to both technical and non-technical stakeholders.
• Evaluate emerging technologies and engineering patterns and incorporate those that