Hiring: Cloud Security / AI Security Engineer | AWS IAM & Cedar Policies | Remot

Role: Cloud Security Engineer / AI Security Engineer Location: Los Angeles, CA (Remote – 10% Travel; must be comfortable traveling to client sites for workshops and meetings) Duration: 3+ Months (Extension Possible) 💼 Experience: 15+ Years Primary Skills: IAM Policy Templates, Cedar Policies Role Overview: Seeking an experienced Security Engineer with 15+ years of experience in cloud security and identity management to secure enterprise AI applications on AWS. The role focuses on authentication, reusable IAM policy templates, Cedar-based authorization, and secure access to tools, APIs, and enterprise resources. Key Responsibilities 1. IAM Policy Templates & Access Management Design, develop, and maintain reusable AWS IAM policy templates for AI agents and AgentCore infrastructure. Implement role-based access control (RBAC) and least-privilege security principles. Define IAM roles, trust policies, permission boundaries, and resource-based policies. Configure IAM execution roles for AgentCore Runtime and AgentCore Gateway. Develop standardized IAM templates for accessing AWS services such as Lambda, S3, Bedrock, API Gateway, Secrets Manager, and CloudWatch. Automate IAM policy deployment and configuration using Terraform, AWS CloudFormation, or AWS CDK. Conduct IAM access reviews, permission audits, and policy validation. Troubleshoot access-denied issues, role-assumption failures, and authorization misconfigurations. 2. Cedar Policies at AgentCore Gateway Design, author,