Security Engineer (AWS Bedrock AgentCore / AI Security)

ZealHire Inc.; Los Angeles (CA); Hybrid; USD 96,000 - 165,000; Full time

Job summary

ZealHire Inc. seeks a Security Engineer to design, implement, and manage security for enterprise AI applications built on AWS Bedrock AgentCore.

You will focus on secure identity management, reusable IAM policy templates, and policy-based access control across agents, tools, APIs, and integrations. The role requires expertise in AgentCore Identity, IAM, Cedar-based authorization, and experience with OAuth 2.0, OIDC, and JWT.

Qualifications

• Experience designing security frameworks for enterprise AI applications on AWS Bedrock AgentCore.
• Strong knowledge of AgentCore Identity, IAM, and Cedar-based policies for fine-grained access control.
• Proficiency with OAuth 2.0, OpenID Connect, and JWT-based authentication.
• Ability to integrate with identity providers such as Cognito, Entra ID, or Okta.

Responsibilities

• 1. Design and implement secure identity and authentication for Bedrock AgentCore.
• 2. Develop reusable IAM policy templates and RBAC controls for AI agents and enterprise integrations.

Skills

Cloud security

IAM policy design

RBAC

OAuth 2.0

OIDC

JWT authentication

AgentCore Identity

Cedar policies

Tools

AWS Bedrock AgentCore

Cognito

Entra ID

Okta

Job description

Security Engineer (AWS Bedrock AgentCore / AI Security) | JPC-8841

Job Description – Security Engineer (AWS Bedrock AgentCore / AI Security)

Duration: 3+ Months (Extension Possible)

Work Arrangement: Hybrid - 2 days onsite Locals Only

Visa: H1B/ /GC/GC-EAD/H4EAD (Need PP no for travel History) USC

LinkedIn should match the resume dates, projects and should be created before 2021 and have photograph and location mentioned

2 Manager references with LinkedIn

10 years of profile

Role: Cloud Security Engineer / AI Security Engineer
Primary Skills: AWS Bedrock AgentCore Identity, IAM Policy Templates, Cedar Policies, AgentCore Gateway

Job Summary

We are seeking an experienced Security Engineer to design, implement, and manage security frameworks for enterprise Agentic AI applications built on AWS Bedrock AgentCore.

The ideal candidate will have strong expertise in AgentCore Identity, AWS Identity and Access Management (IAM), and Cedar-based fine-grained authorization policies to secure AI agents, tools, APIs, and enterprise integrations.

This role focuses on implementing secure identity management, reusable IAM policy templates, and policy-based access control at the Amazon Bedrock AgentCore Gateway.

Key Responsibilities

1. Amazon Bedrock AgentCore Identity & Authentication

• Design and implement secure identity and authentication solutions using Amazon Bedrock AgentCore Identity.
• Configure inbound and outbound authentication for AI agents accessing enterprise applications, tools, and external APIs.
• Implement OAuth 2.0, OpenID Connect (OIDC), JWT-based authentication, and AWS IAM-based authentication.
• Integrate AgentCore Identity with identity providers such as Amazon Cognito, Microsoft Entra ID, or Okta.
• Configure secure token management, credential handling, and access delegation.
• Implement secure agent-to-agent, agent-to-tool, and agent-to-API access patterns.
• Ensure that agents operate within appropriate identity boundaries and cannot access unauthorized enterprise resources.

2. IAM Policy Templates & Access Management

• Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure.
• Implement role-based access control (RBAC) and least-privilege security principles.
• Define IAM roles, trust policies, permission boundaries, and resource-based policies.
• Configure IAM execution roles for AgentCore Runtime and AgentCore Gateway.

$000,000 – $000,000 Salary range is not shown on the candidate portal