Summary:Securing AI comes down to controlling what AI agents can do at the moment they act, and the gateway is where that control happens. In this role you will add new AI security features to our access proxy product and help carry that capability into the Delinea Platform, first by connecting that product to the platform and proving the experience with real customers, then by moving those features natively into the platform without disrupting the customers already using them. This role will report directly into our Director of Engineering, Securing AI.
What You'll Do:- Build new AI security features into our access proxy product, the point where agent and user traffic is inspected and controlled.
- Treat protocols such as Model Context Protocol (MCP) as enforcement boundaries, and build controls for agent-to-agent communication.
- Connect that product to the Delinea Platform and prove the experience with design and paying customers on live capability.
- Move those features into the Delinea Platform as the product matures, keeping customers running smoothly throughout the transition.
- Enforce just-in-time access and policy decisions in the request path, drawing on the platform's identity and authorization building blocks.
- Partner with product and with the teams building the platform's proxy and access engine.
What You'll Need:- Typically 8 or more years building production backend or networking systems.
- Hands-on experience with proxies, gateways, API gateways, or other systems that sit in the request path and inspect or control traffic.
- Strong skills in a modern backend language such as Go, C#, Java, or Rust.
- Experience evolving a product across releases, including moving capabilities between systems without disrupting customers.
- Ability to work complex problems with limited direction and make sound design trade-offs.
We'd Love to See:- Experience with secure access technologies such as privileged access management, zero trust network access, or SSH, RDP, and database proxying.
- Familiarity with AI agents, Model Context Protocol, or LLM traffic.
- Background in security or identity.
For this Job, Delinea is not considering candidates that need any type of US work authorization now or in the future. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.
