Security Engineer - Agentic AI, Identity & eCommerce Security

Job Description

In this role, you’ll partner closely with engineering, platform, and AI teams to design and enforce security controls for agentic AI–driven eCommerce experiences. Day to day, you’ll define runtime authorization and identity models for users and non‑human agents, secure guest-facing flows and backend services, and ensure consistent enforcement across edge, API, service, and AI runtime layers. You’ll embed security into the SDLC, establish observability and guardrails to prevent excessive autonomy or misuse, and provide practical, hands‑on guidance to development teams building high‑impact autonomous capabilities in a cloud‑native environment.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 8+ years of experience in security engineering, application security, or platform security

• Current experience with agentic AI security and compliance support

• Deep expertise in OAuth 2.0/2.1, OIDC, token-based authorization, and service principals

• Experience with Edge, API & Platform Security

• Hands‑on experience securing large‑scale, consumer‑facing eCommerce platforms

• Strong foundation in web application security, API security, and distributed systems

• Proven DevSecOps / AppSec experience embedded in modern SDLCs

• Experience supporting high‑availability, production eCommerce environments