AWS Agentcore Engineer

Req number:

Employment type:

Worksite flexibility:

Who we are

CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary

Job Description

We are looking for a AWS Agentcore Engineer to own server registration, OPA policy configuration, identity propagation, and OBO setup so that the gateway can securely route agent requests to approved MCP servers. The role is policy-heavy, security-heavy, and focused on enterprise governance. This position will be Contract and remote

What You'll Do

• Configure AgentCore Gateway as the MCP gateway

• Register MCP servers with the gateway, including manifests, tool schemas, and routing

• Configure OPA policies for tool access control and policy enforcement

• Set up OAuth2/OIDC-based identity flow and OBO behavior through the gateway

• Ensure backend systems receive user-scoped identity or credentials where required

• Work with AWS IAM, Lambda Function URLs, and private/on-prem connectivity

• Support auditability, logging, and access governance for production deployments

What You'll Need

Required:

• 3-8 Yrs of senior-level cloud or platform engineering experience

• Strong understanding of OAuth2, OIDC, JWTs, and OBO patterns

• Strong hands-on experience with gateway configuration and policy-as-code

• Experience with AWS infrastructure and security controls

• Ability to configure and troubleshoot MCP server registration and routing

• Familiarity with access-control design for enterprise systems

Preferred:

• Deep experience with OPA and Rego

• Experience with AWS AgentCore

• Experience with AWS Lambda, IAM, Secrets Manager, and CloudWatch

• Exposure to AI/agent platforms and MCP-based integrations

Physical Demands

• Ability to safely and successfully perform the essential job functions

• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.

• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

Reasonable accommodation statement

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111.