AWS Security Engineer (AWS AgentCore configuration and engineering)

Title: AWS Security Engineer (AWS AgentCore configuration and engineering)

Location: The Woodlands, TX,

New Orleans, LA,

Little Rock, AR Or

Jackson, MS

Job Summary

We are seeking a Senior AWS Security Engineer with strong hands-on experience in AWS security and AWS AgentCore configuration and engineering. The candidate will be responsible for designing, implementing, securing, and supporting AWS and agentic AI environments.

Key Responsibilities

• Design, configure, deploy, and support AWS AgentCore environments.
• Configure and manage AgentCore Runtime, Gateway, Memory, and Observability.
• Implement secure IAM, authentication, authorization, and least-privilege access.
• Secure agent integrations with APIs, applications, AWS services, and enterprise systems.
• Implement AWS security controls using KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Design secure AWS networking using VPC, Security Groups, NACLs, VPC Endpoints, PrivateLink, and WAF.
• Implement security controls for GenAI and agentic AI workloads, including prompt injection, data leakage, and excessive agent permissions.
• Automate infrastructure and security deployments using Terraform, CloudFormation, or AWS CDK.
• Troubleshoot complex AgentCore, IAM, networking, authentication, and security issues.

Required Skills

• The candidate must have hands-on experience configuring and engineering AWS AgentCore, including AgentCore Runtime, Gateway, Memory, and Observability.
• Strong experience with AWS security services, including IAM, KMS, Secrets Manager, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Should have strong knowledge of AWS networking and security, including VPCs, Security Groups, NACLs, VPC Endpoints, PrivateLink, WAF, and TLS.
• Should understand agentic AI and GenAI security, including prompt injection, data protection, agent identity, tool authorization, and excessive permissions.
• Experience with Amazon Bedrock and integrating AI agents with enterprise applications and APIs.
• Hands-on experience with Terraform, CloudFormation, or AWS CDK for Infrastructure as Code.
• Experience with DevSecOps, CI/CD, Git, Docker, and security automation.
• Scripting experience using Python, Bash, or similar languages and strong knowledge of REST APIs and API security.
• Strong troubleshooting, threat modeling, security architecture, and incident response skills.
• AWS Security Specialty certification is preferred.