AWS Security Engineer - AgentCore

ComTec Information Systems (IT); Houston (TX); Hybrid; USD 140,000 - 190,000; Full time

Job summary

ComTec Information Systems (IT) seeks a Senior AWS Security Engineer to design, implement, and secure AWS AgentCore environments for enterprise AI workloads. You will configure agent runtimes, IAM, VPC networking, and security controls across AWS services, with automation via Terraform, CloudFormation, or AWS CDK.

Ideal candidates have hands-on AWS security expertise, DevSecOps experience, and familiarity with Bedrock and enterprise API integrations.

Qualifications

• Hands-on experience configuring and engineering AWS AgentCore.
• Strong experience with AWS security services (IAM, KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, Config).
• Knowledge of AWS networking and security (VPC, SGs, NACLs, Endpoints, PrivateLink, WAF, TLS).
• Understanding of agentic AI and GenAI security, including prompt injection and data protection.
• Experience with Amazon Bedrock and integrating AI agents with enterprise apps/APIs.
• IaC with Terraform, CloudFormation or AWS CDK for infrastructure security.
• DevSecOps, CI/CD, Git, Docker, and security automation.
• Scripting in Python/Bash; strong REST API security knowledge.
• Strong troubleshooting, threat modeling, security architecture, and incident response.
• AWS Security Specialty certification is preferred.

Responsibilities

• Design, configure, deploy, and support AWS AgentCore environments.
• Configure and manage AgentCore Runtime, Gateway, Memory, and Observability.
• Implement secure IAM, authentication, authorization, and least-privilege access.
• Secure agent integrations with APIs, applications, AWS services, and enterprise systems.
• Implement AWS security controls using KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Design secure AWS networking using VPC, Security Groups, NACLs, VPC Endpoints, PrivateLink, and WAF.
• Implement security controls for GenAI and agentic AI workloads, including prompt injection and data protection.
• Automate infrastructure and security deployments using Terraform, CloudFormation, or AWS CDK.
• Troubleshoot complex AgentCore, IAM, networking, authentication, and security issues.

Skills

AWS AgentCore

AWS security

Terraform

CloudFormation

AWS CDK

DevSecOps

CI/CD

Python scripting

REST APIs

Incident response

Threat modeling

TLS security

Tools

Terraform

CloudFormation

AWS CDK

Docker

Git

KMS

Secrets Manager

Job description

Location: Hybrid/Remote (New Orleans, LA, Little Rock, AR or Jackson, MS)

Job Summary

We are seeking a Senior AWS Security Engineer with strong hands-on experience in AWS security and AWS AgentCore configuration and engineering. The candidate will be responsible for designing, implementing, securing, and supporting AWS and agentic AI environments.

Key Responsibilities

• Design, configure, deploy, and support AWS AgentCore environments.
• Configure and manage AgentCore Runtime, Gateway, Memory, and Observability.
• Implement secure IAM, authentication, authorization, and least-privilege access.
• Secure agent integrations with APIs, applications, AWS services, and enterprise systems.
• Implement AWS security controls using KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Design secure AWS networking using VPC, Security Groups, NACLs, VPC Endpoints, PrivateLink, and WAF.
• Implement security controls for GenAI and agentic AI workloads, including prompt injection, data leakage, and excessive agent permissions.
• Automate infrastructure and security deployments using Terraform, CloudFormation, or AWS CDK.
• Troubleshoot complex AgentCore, IAM, networking, authentication, and security issues.

Required Skills

• The candidate must have hands-on experience configuring and engineering AWS AgentCore, including AgentCore Runtime, Gateway, Memory, and Observability.
• Strong experience with AWS security services, including IAM, KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Should have strong knowledge of AWS networking and security, including VPCs, Security Groups, NACLs, VPC Endpoints, PrivateLink, WAF, and TLS.
• Should understand agentic AI and GenAI security, including prompt injection, data protection, agent identity, tool authorization, and excessive permissions.
• Experience with Amazon Bedrock and integrating AI agents with enterprise applications and APIs.
• Hands-on experience with Terraform, CloudFormation, or AWS CDK for Infrastructure as Code.
• Experience with DevSecOps, CI/CD, Git, Docker, and security automation.
• Scripting experience using Python, Bash, or similar languages and strong knowledge of REST APIs and API security.
• Strong troubleshooting, threat modeling, security architecture, and incident response skills.
• AWS Security Specialty certification is preferred.