Cloud & AI Security Engineer - AWS Bedrock & Cedar

Rapsys Technologies Pte Ltd.; Los Angeles (CA); Sur place; USD 120 000 - 180 000; Plein temps

Résumé du poste

Rapsys Technologies Pte Ltd. seeks a Cloud Security Engineer to design, implement, and manage security frameworks for enterprise AI applications built on AWS Bedrock AgentCore.

The role focuses on secure identity management, reusable IAM templates, and Cedar-based authorization to protect agents, tools, APIs, and enterprise integrations. Local to CA or LA preferred; 3+ month contract with extension potential.

Qualifications

• Experience designing secure identity and authentication for AI/enterprise apps.
• Ability to build reusable IAM policy templates with least-privilege in mind.
• Proficiency in Cedar policy language and ABAC/RBAC methodologies.
• Hands-on with Bedrock AgentCore Gateway and policy-based access control.
• Proficient in IaC tools (Terraform, CloudFormation, or CDK).
• Experience with CI/CD security integration (GitHub Actions).
• Strong knowledge of AWS security services (CloudTrail, CloudWatch, Secrets Manager).

Responsabilités

• Design and implement secure identity and authentication using Bedrock AgentCore Identity.
• Create reusable IAM policy templates for AgentCore and AWS services.
• Develop Cedar authorization policies and ABAC/RBAC controls.
• Govern security for enterprise AI agents, tools, APIs, and integrations.
• Automate security policy deployment via IaC Pipelines and GitHub Actions.
• Collaborate with AI engineering and DevOps to secure production deployments.

Connaissances

AWS Bedrock

AgentCore Identity

IAM Policy Templates

Cedar Policies

AgentCore Gateway

RBAC

ABAC

OAuth 2.0

OIDC

JWT

Terraform

AWS CDK

CloudFormation

Python

GitHub Actions

CloudTrail

CloudWatch

Secrets Manager

STS

IAM Roles

APIs Security

Outils

Lambda

S3

Bedrock

Cognito

Entra ID

Okta

Description du poste

Rapsys Technologies Pte Ltd. seeks a Cloud Security Engineer to design, implement, and manage security frameworks for enterprise AI applications built on AWS Bedrock AgentCore.

The role focuses on secure identity management, reusable IAM templates, and Cedar-based authorization to protect agents, tools, APIs, and enterprise integrations. Local to CA or LA preferred; 3+ month contract with extension potential.