security engineer for agent authorization

DataArt develops an AI platform focused on secure agent operations and controlled tool access, including authorization, credential management, identity validation, audit tracing, and gateway-based protection for tool interactions.

• Implement authorization systems for API and tool access;
• Manage credential storage and secret rotation patterns for target systems;
• Validate agent identity and support cross-agent authentication and service-to-service trust;
• Improve observability and tracing for agent workflows and tool invocation activity;
• Support audit logging for agent interactions and tool access events;
• Enforce gateway controls to prevent direct tool access outside approved paths;
• Work with AWS-based secrets management for per-target credential storage and rotation.

• 3+ Years of security engineering experience in AI or ML platforms or agent platforms;
• Experience implementing authorization systems for API or tool access;
• Experience with credential management and secret rotation patterns;
• Experience with agent workflow observability and tracing;
• Knowledge of Cedar policy engine for agent-to-tool permissions and tool-level access control;
• Experience with OAuth tokens, API keys, and IAM roles for secure credential handling;
• Experience validating JWT and supporting service-to-service trust models;
• Experience with audit logging and tracing for agent workflows;
• Experience with Cedar policy language or OPA for agent authorization;
• Experience with AWS Bedrock AgentCore policy configuration;
• Knowledge of agent-to-agent authentication patterns;
• Experience with zero-trust architecture for agentic systems;
• Knowledge of MCP protocol security, including authentication and authorization at tool invocation.

• No conditions specified