AI Security Engineer — AWS Bedrock AgentCore

ZealHire Inc.; Los Angeles (CA); Hybrid; USD 96,000 - 165,000; Full time

Job summary

ZealHire Inc. seeks a Security Engineer to design, implement, and manage security for enterprise AI applications built on AWS Bedrock AgentCore.

You will focus on secure identity management, reusable IAM policy templates, and policy-based access control across agents, tools, APIs, and integrations. The role requires expertise in AgentCore Identity, IAM, Cedar-based authorization, and experience with OAuth 2.0, OIDC, and JWT.

Qualifications

• Experience designing security frameworks for enterprise AI applications on AWS Bedrock AgentCore.
• Strong knowledge of AgentCore Identity, IAM, and Cedar-based policies for fine-grained access control.
• Proficiency with OAuth 2.0, OpenID Connect, and JWT-based authentication.
• Ability to integrate with identity providers such as Cognito, Entra ID, or Okta.

Responsibilities

• 1. Design and implement secure identity and authentication for Bedrock AgentCore.
• 2. Develop reusable IAM policy templates and RBAC controls for AI agents and enterprise integrations.

Skills

Cloud security

IAM policy design

RBAC

OAuth 2.0

OIDC

JWT authentication

AgentCore Identity

Cedar policies

Tools

AWS Bedrock AgentCore

Cognito

Entra ID

Okta

Job description

ZealHire Inc. seeks a Security Engineer to design, implement, and manage security for enterprise AI applications built on AWS Bedrock AgentCore.

You will focus on secure identity management, reusable IAM policy templates, and policy-based access control across agents, tools, APIs, and integrations. The role requires expertise in AgentCore Identity, IAM, Cedar-based authorization, and experience with OAuth 2.0, OIDC, and JWT.