Cloud Engineer

• Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure
• Implement RBAC and least-privilege security principles
• Define IAM roles, trust policies, permission boundaries, and resource-based policies
• Configure IAM execution roles for AgentCore Runtime and AgentCore Gateway
• Develop standardized IAM templates for Lambda, S3, Bedrock, API Gateway, Secrets Manager, and CloudWatch
• Automate IAM policy deployment using Terraform, AWS CloudFormation, or AWS CDK
• Conduct IAM access reviews, permission audits, and policy validation
• Troubleshoot access-denied issues, role-assumption failures, and authorization misconfigurations
• Design, author, test, and deploy Cedar authorization policies using Amazon Bedrock AgentCore Policy
• Implement fine-grained authorization and ABAC for AI agents accessing tools through AgentCore Gateway
• Configure policy engines and associate them with AgentCore Gateways
• Validate Cedar policies against gateway schemas and test permitted and denied access scenarios
• Enforce default-deny authorization and prevent unauthorized tool execution
• Monitor and troubleshoot authorization decisions and policy evaluation failures
• Implement security controls and standards for enterprise AI agents and Generative AI applications
• Support audit logging, access traceability, and security monitoring using AWS CloudTrail and CloudWatch
• Identify and mitigate excessive privileges, credential exposure, unauthorized tool access, and privilege escalation
• Conduct security reviews of agent architecture and integrations
• Collaborate with AI engineering and DevOps teams on secure production deployments
• Automate security policy deployment through GitHub Actions and infrastructure-as-code pipelines
• Integrate IAM and Cedar policy validation into CI/CD workflows
• Implement automated security checks and policy compliance testing
• Maintain version-controlled security configurations across environments
• Support security incident investigation, access troubleshooting, and remediation

Explore Cloud Security / AI Security Engineer, AWS IAM, Cedar Policies at TMS, LLC. Review requirements and application details.