We are looking for a senior AWS agentcore engineer to configure AgentCore Gateway as the MCP gateway for the AI platform. This person will own server registration, OPA policy configuration, identity propagation, and OBO setup so that the gateway can securely route agent requests to approved MCP servers. The role is policy-heavy, security-heavy, and focused on enterprise governance.
Responsibilities
- Configure AgentCore Gateway as the MCP gateway.
- Register MCP servers with the gateway, including manifests, tool schemas, and routing.
- Configure OPA policies for tool access control and policy enforcement.
- Set up OAuth2/OIDC-based identity flow and OBO behavior through the gateway.
- Ensure backend systems receive user-scoped identity or credentials where required.
- Work with AWS IAM, Lambda Function URLs, and private/on-prem connectivity.
- Support auditability, logging, and access governance for production deployments.
Required qualifications
- Senior-level cloud or platform engineering experience.
- Solid understanding of OAuth2, OIDC, JWTs, and OBO patterns.
- Strong hands-on experience with gateway configuration and policy-as-code.
- Experience with AWS infrastructure and security controls.
- Ability to configure and troubleshoot MCP server registration and routing.
- Familiarity with access-control design for enterprise systems.
Preferred qualifications
- Deep experience with OPA and Rego.
- Experience with AWS AgentCore.
- Experience with AWS Lambda, IAM, Secrets Manager, and CloudWatch.
- Exposure to AI/agent platforms and MCP-based integrations.