Security engineer for AI-agent platforms

Intellias; United States; Teletrabalho; USD 150 000 - 190 000; Tempo integral

Resumo da oferta

Intellias is seeking a Security / Policy Engineer to design and implement authorization models for AI agents and cloud-native platforms. The role focuses on Cedar, OAuth/JWT-based authorization, and zero-trust security.

You will work with enterprise security teams to define principals, resources, and conditional access, develop policy-as-code, and ensure auditability of policy decisions across distributed systems.

Qualificações

• Hands-on experience designing ABAC models and least-privilege access.
• Strong background in cloud security and identity management.
• Familiarity with IAM governance and enterprise security reviews.

Responsabilidades

• Design and implement authorization policies using Cedar and AWS AgentCore Policy.
• Develop policy-as-code frameworks for cloud-native and AI-agent platforms.
• Manage ABAC models with least-privilege and default-deny principles.
• Integrate authorization with OAuth 2.0, JWT, and Microsoft Entra ID.
• Define principals, resources, actions, and conditional access policies.
• Define token validation, claims mapping, and authorization workflows.
• Implement audit logging and traceability for policy decisions.
• Collaborate with security and architecture teams on governance.
• Contribute to zero-trust strategy across distributed systems.
• Evaluate AWS authorization tech including Cedar and AWS Verified Permissions.

Conhecimentos

Cloud security

Identity engineering

ABAC design

Zero-trust architecture

Policy-as-code

Ferramentas

Cedar (AWS AgentCore Policy)

OAuth 2.0 / JWT

Microsoft Entra ID

Policy-as-code tooling

Descrição da oferta de emprego

Описание:

We are looking for a Security / Policy Engineer to design and implement authorization models for AI agents and cloud-native platforms. The role focuses on AWS AgentCore Policy (Cedar), policy-as-code, OAuth/JWT-based authorization, and zero-trust security architecture. The ideal candidate has hands-on experience with cloud security, identity engineering, ABAC design, and enterprise-grade access control systems.

Задачи:

• Design and implement authorization policies using Cedar and AWS AgentCore Policy.


• Develop and maintain policy-as-code frameworks for cloud-native and AI-agent platforms.


• Build and govern Attribute-Based Access Control (ABAC) models following least-privilege and default-deny principles.


• Integrate authorization systems with OAuth 2.0, JWT, and Microsoft Entra ID.


• Define and maintain principals, resources, actions, and conditional access policies.


• Design token validation, claims mapping, and authorization decision workflows.


• Implement audit logging and traceability for policy evaluation and access decisions.


• Partner with security, architecture, and platform teams to support enterprise security reviews and governance processes.


• Contribute to zero-trust security architecture and authorization strategy across distributed systems.


• Evaluate and adopt emerging AWS authorization technologies, including Cedar and AWS Verified Permissions.

Требования:

• AWS AgentCore Policy (Cedar) Cedar policy language (principals, actions, resources, conditions)


• OAuth 2.0 / JWT / MS Entra integration


• Policy-as-code patterns


• Default-deny authorization models


• Audit logging for policy decisions


• 5+ years cloud security or identity engineering


• Attribute-based access control (ABAC) design


• OAuth 2.0 / JWT token inspection and claims mapping


• Enterprise security review (InfoSec, ARB processes)


• Будет плюсом: AWS Cedar (open source) prior exposure; AWS Verified Permissions or AgentCore Policy early experience; Zero-trust architecture design

Условия:

By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That's why we offer a range of benefits that support your well-being and charge your professional growth.