We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control. The ideal candidate combines hands-on security engineering experience with strong Python skills and a deep understanding of modern authorization architectures.
Policy engineer for AI agent platforms
подготовься к отклику
ai-инструментыЧтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
описание
задачи
- Design, implement, and maintain authorization policies using Cedar policy language.
- Develop and test policy definitions, validation workflows, and policy enforcement mechanisms.
- Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
- Build Python-based tooling for policy validation, testing, and governance.
- Integrate authorization frameworks with Microsoft Entra ID and other identity providers.
- Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.
- Implement fine-grained and parameter-level access control models.
- Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents.
- Partner with platform and security teams to ensure secure access governance across distributed systems.
- Create auditability and traceability mechanisms for authorization decisions.
- Support adoption of policy-as-code practices and authorization best practices.
требования
- Cedar policy language — authoring and testing
- AWS AgentCore Policy LOG_ONLY / ENFORCE modes
- Python (policy validation tooling)
- MS Entra claims mapping
- Parameter-level access control patterns
- 3+ years security engineering or backend engineering
- Identity provider integration (Entra, Okta, Cognito)
- Policy definition in any ABAC or RBAC system
- Open Policy Agent (OPA) or Cedar hands-on
- Будет плюсом: LangGraph tool invocation patterns; AWS AgentCore Gateway integration
условия
- By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results.
- That’s why we offer a range of benefits that support your well-being and charge your professional growth.
- We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer.
навыки
Компания разработки продуктов с ИИ и цифровых решений.
Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.