Platform (Security) Engineer – Agentic Security & Enforcement

About the Position

We are looking for a Platform Engineer specializing in Agentic Security & Enforcement to help build the security foundation of an enterprise AI Agent Platform from the ground up. The role will focus on protecting agent-to-tool and agent-to-agent interactions through strong authorization, identity, credential management, and gateway enforcement mechanisms.

You will work on establishing zero-trust security patterns for AI agents, ensuring that agents can access only authorized tools and resources while credentials remain securely managed outside of the agent environment.

Responsibilities

• Design and implement authorization mechanisms for agent-to-tool interactions, including tool-level access control.
• Define and enforce Cedar-based policies governing agent permissions and tool access.
• Implement secure agent identity and authentication, including JWT validation and service-to-service trust.
• Design credential management patterns for OAuth tokens, API keys, and AWS IAM roles, ensuring credentials are never exposed directly to agents.
• Implement secure storage and rotation of per-tool and per-target credentials using AWS secrets management capabilities.
• Enforce gateway-based access patterns to prevent agents from bypassing security controls and directly accessing protected tools.
• Implement security controls for MCP tool invocation, including authentication and authorization.
• Build auditability capabilities for agent workflows, tool invocations, and agent-to-agent interactions.
• Support security tracing and observability across agent workflows.
• Contribute to zero-trust architecture and security standards for the AI Agent Platform.
• Collaborate with platform and engineering teams to embed security controls into agent integration and execution flows.

Requirements

• Agentic authorization - Cedar policy engine for agent-to-tool permissions, tool-level access control
• Agent credential management - per-tool OAuth tokens, API keys, IAM roles (never exposed to agents)
• Agent identity - JWT validation, cross-agent authentication, service-to-service trust
• Agentic audit - tracing agent workflows, tool invocation logging, agent-to-agent interaction tracking
• Gateway enforcement - ensuring agents cannot bypass the gateway to reach tools directly
• AWS secrets management - per-target credential storage and rotation

Nice to Have

• Cedar policy language or OPA for agent authorization
• AWS Bedrock AgentCore policy configuration
• Agent-to-agent authentication patterns
• Zero-trust architecture for agentic systems
• MCP protocol security (authentication, authorization at tool invocation)

We Offer

• Competitive salary
• Remote work options
• Professional development budget

About the Company

At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth.

We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law.

We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.