FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in AWS IAM, cloud security, and identity management, with a strong focus on implementing fine-grained access control and security policies for enterprise AI applications. Proficient in automating security policy deployment and integrating IAM solutions into CI/CD workflows.
Highest-signal resume keywords
AWS IAMCedar Policy LanguageTerraformRBACABAC
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Cloud SecurityIdentity ManagementFine-Grained Access ControlPolicy ValidationAuthorization PrinciplesAWS Secrets ManagerAWS CloudTrailAWS CloudFormationPythonGitHub Actions
Soft Skills
CollaborationProblem-SolvingCommunication
Tools & Technologies
AWS CDKCI/CD WorkflowsInfrastructure-as-Code PipelinesAgentCore GatewayAPI Gateway
Industry Keywords
Least-Privilege AccessCredential ManagementSecure API IntegrationsAccess TroubleshootingSecurity Monitoring
Tech Stack
Tools & technologiesAWSCloudPythonTerraform
About the role
Key responsibilities & impact- Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure
- Implement RBAC and least-privilege security principles
- Define IAM roles, trust policies, permission boundaries, and resource-based policies
- Configure IAM execution roles for AgentCore Runtime and AgentCore Gateway
- Develop standardized IAM templates for Lambda, S3, Bedrock, API Gateway, Secrets Manager, and CloudWatch
- Automate IAM policy deployment using Terraform, AWS CloudFormation, or AWS CDK
- Conduct IAM access reviews, permission audits, and policy validation
- Troubleshoot access-denied issues, role-assumption failures, and authorization misconfigurations
- Design, author, test, and deploy Cedar authorization policies using Amazon Bedrock AgentCore Policy
- Implement fine-grained authorization and ABAC for AI agents accessing tools through AgentCore Gateway
- Configure policy engines and associate them with AgentCore Gateways
- Validate Cedar policies against gateway schemas and test permitted and denied access scenarios
- Enforce default-deny authorization and prevent unauthorized tool execution
- Monitor and troubleshoot authorization decisions and policy evaluation failures
- Implement security controls and standards for enterprise AI agents and Generative AI applications
- Support audit logging, access traceability, and security monitoring using AWS CloudTrail and CloudWatch
- Identify and mitigate excessive privileges, credential exposure, unauthorized tool access, and privilege escalation
- Conduct security reviews of agent architecture and integrations
- Collaborate with AI engineering and DevOps teams on secure production deployments
- Automate security policy deployment through GitHub Actions and infrastructure-as-code pipelines
- Integrate IAM and Cedar policy validation into CI/CD workflows
- Implement automated security checks and policy compliance testing
- Maintain version-controlled security configurations across environments
- Support security incident investigation, access troubleshooting, and remediation
Requirements
What you’ll need- 15+ years of experience in cloud security and identity management
- Experience securing enterprise AI applications on AWS
- Experience with AWS IAM, IAM roles, policies, STS, AWS Secrets Manager, CloudTrail, and CloudWatch
- Experience with Cedar policy language, RBAC, ABAC, and fine-grained access control
- Experience with OAuth 2.0, OIDC, JWT, and AWS IAM authentication
- Experience with Terraform, AWS CDK, or CloudFormation
- Experience with Python, GitHub Actions, and CI/CD security integration
- Knowledge of least-privilege access, identity federation, credential management, and secure API integrations
- Must be comfortable traveling to client sites for workshops and meetings
Benefits
Comp & perks- Remote work
- 10% travel to client sites for workshops and meetings
- Contract extension possible