AWS Security Engineer

About the role

Intellias is looking for an experienced AWS Security Engineer to join its Colombia team. You will design, implement and govern advanced authorization policies for cloud‑native and AI‑agent platforms, ensuring secure, least‑privilege access across the organization.

Key responsibilities

• Design and implement authorization policies using Cedar and AWS AgentCore Policy.
• Develop and maintain Policy‑as‑Code frameworks for cloud‑native and AI‑agent platforms.
• Build and govern Attribute‑Based Access Control (ABAC) models following default‑deny principles.
• Integrate authorization systems with OAuth 2.0, JWT and Microsoft Entra ID.
• Define principals, resources, actions and conditional access policies.
• Implement audit logging and traceability for policy evaluation and access decisions.
• Collaborate with Security, Architecture and Platform Engineering teams on enterprise security reviews and governance.
• Contribute to Zero Trust architecture and evaluate emerging AWS authorization technologies.

Required profile

• Advanced Business English (C1) proficiency.
• 5+ years of experience in Cloud Security, Identity Engineering or related fields.
• Hands‑on experience with AWS Verified Permissions or AWS AgentCore Policy.
• Strong background designing ABAC models and working with OAuth 2.0, JWT, and claims mapping.
• Experience participating in enterprise security reviews, InfoSec governance and Architecture Review Board processes.

Required skills

• AWS Verified Permissions
• AWS AgentCore Policy (Cedar)
• Cedar policy language
• OAuth 2.0
• JWT token validation
• Microsoft Entra ID integration
• Policy‑as‑Code design
• Attribute‑Based Access Control (ABAC)
• Zero Trust architecture
• Audit logging and policy decision traceability

What we offer

• B2B contract with USD payment
• Opportunity to work in an international, innovative tech environment