AWS AgentCore & MCP Gateway - Technical Lead

NTT DATA Services • Dallas, TX

2d • $102,780 - $171,125 • Remote

About The Position

NTT DATA is seeking a hands-on AWS and Model Context Protocol (MCP) Technical Lead to lead the architecture, implementation, and operationalization of an enterprise MCP Gateway using AWS AgentCore. The role will establish a secure, scalable gateway pattern that enables developers, AI agents, and enterprise applications to discover and access approved MCP servers and tools.

The Technical Lead will design and deploy the gateway and server registry, configure integrations with enterprise platforms, and develop secure identity, authentication, authorization, networking, and governance patterns. The position will also establish operational controls, observability, automated deployments, and reusable processes for managing MCP servers. The lead will collaborate across security, IAM, cloud platform, networking, application engineering, and AI teams, while providing technical direction and mentoring to the implementation team.

This is a remote role. The posted U.S.-based target compensation range is $102,780 to $171,125; actual compensation depends on location, experience, skills, and qualifications. The position may also be eligible for incentive compensation based on individual or company performance.

Requirements

• 8+ years of strong hands-on experience with AWS architecture and cloud-native services.
• 5+ years of strong understanding of AWS AgentCore, particularly Gateway and Identity capabilities.
• 5+ years of hands-on understanding of MCP, including MCP servers, tools, clients, gateways, and registries.
• 3+ years of experience integrating enterprise platforms through APIs or MCP, preferably GitHub, JIRA/Atlassian, and AWS services.
• 5+ years of experience with AWS IAM, OAuth 2.0/OIDC/JWT, AWS networking, VPC and private connectivity, Amazon Bedrock and Bedrock Guardrails, Cedar or policy-based authorization, API and gateway security, Infrastructure as Code (preferably AWS CDK or Terraform), CI/CD, and automated deployment.

Nice To Haves

• Strong understanding of AI/agent security, least-privilege access, secrets management, authorization, prompt-injection risks, and secure tool execution.
• Strong troubleshooting and solution-design capabilities across application, security, networking, and cloud layers.
• Experience building enterprise GenAI or agentic AI platforms.
• Experience implementing centralized gateways for multiple AI agents and MCP servers.
• Experience with AWS Bedrock, AgentCore Runtime, Lambda, ECS, or similar AWS runtime patterns.
• Experience designing enterprise identity federation and delegated authorization.
• Experience working with Security and Architecture teams to productionize emerging AI technologies.

Responsibilities

• Lead the design, setup, configuration, and deployment of AWS AgentCore Gateway and MCP Gateway architecture.
• Establish a centralized MCP Gateway and MCP server registry for approved internal and external MCP servers.
• Configure MCP targets and integrations with GitHub, JIRA, AWS services, and custom enterprise MCP servers.
• Design secure authentication and authorization patterns using AWS AgentCore Identity, IAM, JWT/OIDC, OAuth/3LO, and Cedar policies.
• Implement fine-grained authorization for users, agents, MCP servers, and tools.
• Integrate Amazon Bedrock Guardrails and gateway request/response controls to help protect MCP interactions from prompt injection, credential leakage, inappropriate tool access, and sensitive-data exposure.
• Design connectivity using VPC, PrivateLink/private endpoints, security groups, IAM roles, and enterprise networking patterns.
• Build secure patterns for human/developer-driven MCP access and programmatic AI agent access, distinguishing interactive developer identity from IAM role-based agent identity.
• Establish logging, monitoring, observability, alerting, and auditability across the MCP gateway and tool invocations.
• Automate infrastructure and configuration using AWS CDK or other Infrastructure as Code and CI/CD pipelines, including controlled deployment and rollback.
• Define reusable patterns for onboarding, approving, registering, updating, and decommissioning MCP servers.
• Partner with Security, IAM, Cloud Platform, Networking, Application Engineering, and AI teams to establish enterprise MCP standards and governance.
• Troubleshoot issues across identity, OAuth, networking, gateway routing, policy enforcement, MCP protocol interactions, and downstream integrations.
• Provide technical leadership, architectural guidance, code reviews, engineering standards, and mentoring to the implementation team.

Benefits

• Medical, dental, and vision insurance with an employer contribution.
• Flexible spending or health savings account.
• Life and AD&D insurance.
• Short- and long-term disability coverage.
• Paid time off.
• Employee assistance.
• 401(k) program with company match.
• Additional voluntary or legally required benefits.
• May be eligible for incentive compensation based on individual and/or company performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed