Remote Cloud & AI Security Engineer | IAM & Cedar Policies

Technology Management Solutions LLC; Salem (OR); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Technology Management Solutions LLC in Los Angeles, CA is seeking a Cloud Security Engineer focused on AI security for enterprise AWS environments. You will design and enforce IAM and Cedar-based authorization for AI agents and AgentCore infrastructure.

The role emphasizes secure authentication, policy automation with IaC, and collaboration with AI engineering and DevOps to ensure compliant, secure production deployments.

Qualifications

• 15+ years of experience in cloud security and identity management.
• Experience with AWS IAM, STS, Secrets Manager, CloudTrail, CloudWatch.
• Proficiency with Cedar policy language, RBAC and ABAC.

Responsibilities

• Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure.
• Implement RBAC and least-privilege security principles.
• Define IAM roles, trust policies, permission boundaries, and resource-based policies.
• Configure IAM execution roles for AgentCore Runtime and AgentCore Gateway.
• Develop standardized IAM templates for AWS services (Lambda, S3, Bedrock, API Gateway, Secrets Manager, CloudWatch).
• Automate IAM policy deployment and configuration using Terraform, CloudFormation, or AWS CDK.
• Conduct IAM access reviews, permission audits, and policy validation.
• Troubleshoot access-denied issues, role-assumption failures, and authorization misconfigurations.
• Design, author, test Cedar authorization policies for AgentCore Gateway.
• Implement ABAC using identity attributes, roles, and contextual conditions.
• Develop policies to restrict sensitive tool operations based on roles and security requirements.

Skills

AWS IAM

RBAC

ABAC

OIDC

JWT

Terraform

CloudFormation

CDK

Python

GitHub Actions

CI/CD Security

Cedar policy

Tools

Bedrock

Job description

Technology Management Solutions LLC in Los Angeles, CA is seeking a Cloud Security Engineer focused on AI security for enterprise AWS environments. You will design and enforce IAM and Cedar-based authorization for AI agents and AgentCore infrastructure.

The role emphasizes secure authentication, policy automation with IaC, and collaboration with AI engineering and DevOps to ensure compliant, secure production deployments.