Senior Identity & Access Engineer for AI Agent Ecosystems

Intellias; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Intellias is seeking a Senior Identity & Access Management Engineer to design and implement secure identity propagation and authorization patterns across AI agent ecosystems. The role focuses on runtime identity, OBO token exchange, identity federation, and secure agent-to-tool communication using AWS Bedrock AgentCore and modern enterprise identity platforms.

Responsibilities include building OBO flows, integrating Bedrock Identity, and enforcing Cedar-based access controls with MS Entra, Okta,

Qualifications

• 5+ years cloud security or identity engineering
• Hands-on OAuth 2.0 / OIDC / JWT implementation
• Enterprise identity federation with MS Entra, Okta, or Cognito

Responsibilities

• Design and implement secure identity propagation across agent → tool → API chains.
• Build and support OBO token exchange flows and scoped identity propagation.
• Integrate AWS Bedrock AgentCore Identity into agent runtime workflows.
• Implement OAuth 2.0, OIDC, and JWT-based auth patterns.
• Develop identity federation integrations with enterprise providers like MS Entra ID, Okta, or Cognito.

Skills

OBO token exchange

Identity propagation

Identity federation

OAuth 2.0 / OIDC / JWT

Workload identity brokering

Credential management

Tools

AWS Bedrock AgentCore Identity

MS Entra ID

Okta

Cognito

Cedar policies / Cedar runtime

AWS Verified Permissions

Job description

Intellias is seeking a Senior Identity & Access Management Engineer to design and implement secure identity propagation and authorization patterns across AI agent ecosystems. The role focuses on runtime identity, OBO token exchange, identity federation, and secure agent-to-tool communication using AWS Bedrock AgentCore and modern enterprise identity platforms.

Responsibilities include building OBO flows, integrating Bedrock Identity, and enforcing Cedar-based access controls with MS Entra, Okta,