AWS Agentcore Engineer

AWS Agentcore Engineer Req number: R8078 Employment type: Full time Worksite flexibility: Remote Who we are CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right—whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary We are looking for a motivated AWS Agentcore Engineer ready to take us to the next level! If you have experience in configuring AgentCore Gateway as the MCP gateway for the AI platform, and are looking for your next career move, apply now. Job Description We are looking for an AWS Agentcore Engineer to own server registration, OPA policy configuration, identity propagation, and OBO setup so that the gateway can securely route agent requests to approved MCP servers. The role is policy-heavy, security-heavy, and focused on enterprise governance. This position will be Contract and remote. What You'll Do Configure AgentCore Gateway as the MCP gateway

Register MCP servers with the gateway, including manifests, tool schemas, and routing

Configure OPA policies for tool access control and policy enforcement

Set up OAuth2/OIDC-based identity flow and OBO behavior through the gateway

Ensure backend systems receive user-scoped identity or credentials where required

Work with AWS IAM, Lambda Function URLs, and private/on-prem connectivity

Support auditability, logging, and access governance for production deployments

What You'll Need

• Required: 3-8 Yrs of senior-level cloud or platform engineering experience

• Strong understanding of OAuth2, OIDC, JWTs, and OBO patterns

• Strong hands-on experience with gateway configuration and policy-as-code

• Experience with AWS infrastructure and security controls

• Ability to configure and troubleshoot MCP server registration and routing

• Familiarity with access-control design for enterprise systems

• Preferred: Deep experience with OPA and Rego

• Experience with AWS AgentCore

• Experience with AWS Lambda, IAM, Secrets Manager, and CloudWatch

• Exposure to AI/agent platforms and MCP-based integrations

• Physical Demands Ability to safely and successfully perform the essential job functions

• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.

• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

• Reasonable accommodation statement If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111.