×
Register Here to Apply for Jobs or Post Jobs. X
More jobs:

Security engineer AI-agent platforms

Job in Phoenix, Maricopa County, Arizona, 85001, USA
Listing for: Intellias
Full Time position
Listed on 2026-11-01
Job specializations:
  • Software Development
    AWS
Salary/Wage Range or Industry Benchmark: 150000 - 190000 USD Yearly USD 150000.00 190000.00 YEAR
Job Description & How to Apply Below
Position: Security engineer for AI-agent platforms
Описание:

We are looking for a Security / Policy Engineer to design and implement authorization models for AI agents and cloud-native platforms. The role focuses on AWS Agent Core Policy (Cedar), policy-as-code, OAuth/JWT-based authorization, and zero-trust security architecture. The ideal candidate has hands-on experience with cloud security, identity engineering, ABAC design, and enterprise-grade access control systems.

Задачи:
  • Design and implement authorization policies using Cedar and AWS Agent Core Policy.
  • Develop and maintain policy-as-code frameworks for cloud-native and AI-agent platforms.
  • Build and govern Attribute-Based Access Control (ABAC) models following least-privilege and default-deny principles.
  • Integrate authorization systems with OAuth 2.0, JWT, and Microsoft Entra .
  • Define and maintain principals, resources, actions, and conditional access policies.
  • Design token validation, claims mapping, and authorization decision workflows.
  • Implement audit logging and traceability for policy evaluation and access decisions.
  • Partner with security, architecture, and platform teams to support enterprise security reviews and governance processes.
  • Contribute to zero-trust security architecture and authorization strategy across distributed systems.
  • Evaluate and adopt emerging AWS authorization technologies, including Cedar and AWS Verified Permissions.
Требования:
  • AWS Agent Core Policy (Cedar) Cedar policy language (principals, actions, resources, conditions)
  • OAuth 2.0 / JWT / MS Entra integration
  • Policy-as-code patterns
  • Default-deny authorization models
  • Audit logging for policy decisions
  • 5+ years cloud security or identity engineering
  • Attribute-based access control (ABAC) design
  • OAuth 2.0 / JWT token inspection and claims mapping
  • Enterprise security review (Info Sec, ARB processes)
  • Будет плюсом: AWS Cedar (open source) prior exposure; AWS Verified Permissions or Agent Core Policy early experience;
    Zero-trust architecture design
Условия:

By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That's why we offer a range of benefits that support your well-being and charge your professional growth.

To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
 
 
 
Search for further Jobs Here:
(Try combinations for better Results! Or enter less keywords for broader Results)
Location
Increase/decrease your Search Radius (miles)
0
200
Filters
Education Level
Experience Level (years)
Posted in last:
Salary