DataArt

security engineer for agent authorization

In short

Роль security engineer в AI-платформе DataArt, ориентированной на безопасную работу AI-агентов: авторизация доступа к API и инструментам, управление учётными данными и ротация секретов, валидация идентичности агентов и межагентная аутентификация, наблюдаемость и аудит-логирование агентных воркфлоу, gateway-контроль доступа к инструментам. Требуется 3+ года опыта в security engineering для AI/ML или agent-платформ, знание Cedar/OPA, OAuth, JWT, IAM, AWS, zero-trust архитектуры и MCP protocol security. Формат работы удалённый.

Описание
DataArt develops an AI platform focused on secure agent operations and controlled tool access, including authorization, credential management, identity validation, audit tracing, and gateway-based protection for tool interactions.
Задачи
•Implement authorization systems for API and tool access
•Manage credential storage and secret rotation patterns for target systems
•Validate agent identity and support cross-agent authentication and service-to-service trust
•Improve observability and tracing for agent workflows and tool invocation activity
•Support audit logging for agent interactions and tool access events
•Enforce gateway controls to prevent direct tool access outside approved paths
•Work with AWS-based secrets management for per-target credential storage and rotation
Требования
•3+ Years of security engineering experience in AI or ML platforms or agent platforms
•Experience implementing authorization systems for API or tool access
•Experience with credential management and secret rotation patterns
•Experience with agent workflow observability and tracing
•Knowledge of Cedar policy engine for agent-to-tool permissions and tool-level access control
•Experience with OAuth tokens, API keys, and IAM roles for secure credential handling
•Experience validating JWT and supporting service-to-service trust models
•Experience with audit logging and tracing for agent workflows
•Experience with Cedar policy language or OPA for agent authorization
•Experience with AWS Bedrock AgentCore policy configuration
•Knowledge of agent-to-agent authentication patterns
•Experience with zero-trust architecture for agentic systems
•Knowledge of MCP protocol security, including authentication and authorization at tool invocation
Условия
No conditions specified

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot