Lead System Engineer - AWS IAM, Python and Agentic AI

Job description

We are looking for a **Lead System Engineer with deep expertise in AWS IAM, Python, and Agentic AI** to define the strategic direction and architect next-generation secure AI systems at enterprise scale. In this role, you will lead the design of secure-by-design controls for agentic mesh AI environments, establish governance frameworks across multi-account AWS landscapes, and drive the adoption of policy-aware AI agents operating within defined security and compliance boundaries. You will also mentor engineers, shape engineering standards, and act as a trusted advisor to senior stakeholders. **Responsibilities** - Lead the architecture and implementation of secure-by-design controls for agentic mesh AI systems built on Amazon Bedrock - Define and own trust boundaries between autonomous AI agents and services across the enterprise - Drive the assessment and mitigation of risks related to prompt injection, model misuse, and agent-to-agent trust and verification - Establish enterprise-wide strategies to address data leakage and cross-agent contamination across AI workloads - Define the vision and roadmap for policy-aware AI agents operating within security and compliance constraints - Set standards for network security patterns for AI workloads, including VPC design, private endpoints, and Bedrock access controls - Architect, govern, and continuously evolve multi-account AWS environments leveraging Organizations and Control Tower - Define and oversee account isolation strategies for AI workloads, data, and agent execution - Establish enforcement frameworks using AWS Security Hub, GuardDuty, Config, and CloudTrail - Lead cross-functional collaboration with AI engineers, cloud teams, and governance stakeholders to align on security architecture and drive consensus on key decisions - Mentor and coach senior and mid-level engineers, fostering technical growth and a security-first culture - Represent the engineering organization in executive-level discussions, producing high-quality architectural documentation and communicating complex security concepts to both technical and non-technical audiences - Contribute to pre-sales activities, technical assessments, and strategic initiatives as a subject matter expert **Requirements** - 8-12 years of general IT experience, including 8+ years of professional experience in system engineering and cloud security - At least 1 year of relevant leadership experience - Deep expertise in AWS IAM, Amazon AWS Security, and AWS Security Hub - Advanced proficiency in Python for automation, security tooling, and framework development - Strong background in Amazon Bedrock AgentCore and AI Agents Frameworks - Solid knowledge of AI & ML Strategy with a focus on secure deployment patterns at enterprise scale - Proven experience designing and governing multi-account AWS environments using Organizations and Control Tower - Hands-on expertise with AWS security services, including GuardDuty, Config, and CloudTrail - Strong understanding of network security patterns for AI workloads, including VPC design and private endpoints - Demonstrated ability to lead architectural decisions, mentor engineers, and influence stakeholders across organizational boundaries - Structured thinker with a security-first mindset, strong leadership presence, and excellent communication skills - Written and spoken proficiency in English (B2 level or higher) **Nice to have** - Deep understanding of agentic AI concepts and design principles - Hands-on experience with multi-agent systems architecture - Practical knowledge of tool-using and autonomous agents - Experience contributing to industry communities, publications, or open-source projects in the AI/cloud security space