Senior Cloud & AI Security Engineer (Remote, Cedar)

Technology Management Solutions LLC; Oregon; Hybrid; USD 120,000 - 180,000; Part time

Job summary

Technology Management Solutions LLC seeks an experienced Cloud Security/AI Security Engineer to secure enterprise AI applications on AWS. The role emphasizes authentication, reusable IAM policy templates, and Cedar-based authorization for secure access to tools, APIs, and enterprise resources; occasional client-site workshops will require travel.

The candidate should bring 15+ years of cloud security experience, proficiency in RBAC/ABAC, IaC, and CI/CD security, with a strong focus on secure

Qualifications

• 15+ years of experience in cloud security and identity management.
• Experience with authentication, IAM templates, and Cedar-based authorization.

Responsibilities

• Design, develop, and maintain reusable AWS IAM policy templates for AI agents and infrastructure.
• Implement RBAC and least-privilege security.
• Define IAM roles, trust policies, permission boundaries, and resource-based policies.
• Configure IAM execution roles for AgentCore Runtime and Gateway.
• Develop standardized IAM templates for AWS services (Lambda, S3, Bedrock, API Gateway, Secrets Manager, CloudWatch).
• Automate IAM policy deployment using IaC tools.
• Conduct access reviews and audits.
• Troubleshoot access-denied issues and misconfigurations.
• Design, author, test Cedar authorization policies for AgentCore Gateway.
• Implement ABAC with identities, roles, scopes, and context.
• Define policy engines and associate with Gateways.
• Validate Cedar policies and ensure default-deny behavior.

Skills

AWS IAM

Cedar policies

RBAC

ABAC

Terraform

CloudFormation

CDK

Python

GitHub Actions

CI/CD security

CloudWatch

CloudTrail

Tools

Terraform

AWS CDK

CloudFormation

GitHub Actions

Job description

Technology Management Solutions LLC seeks an experienced Cloud Security/AI Security Engineer to secure enterprise AI applications on AWS. The role emphasizes authentication, reusable IAM policy templates, and Cedar-based authorization for secure access to tools, APIs, and enterprise resources; occasional client-site workshops will require travel.

The candidate should bring 15+ years of cloud security experience, proficiency in RBAC/ABAC, IaC, and CI/CD security, with a strong focus on secure