вчера

Policy engineer for AI agent platforms

ориентир по рынку
вакансия зп не указана
в среднем 324 200 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой

подготовься к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме

описание

We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control. The ideal candidate combines hands-on security engineering experience with strong Python skills and a deep understanding of modern authorization architectures.

задачи

  • Design, implement, and maintain authorization policies using Cedar policy language.
  • Develop and test policy definitions, validation workflows, and policy enforcement mechanisms.
  • Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
  • Build Python-based tooling for policy validation, testing, and governance.
  • Integrate authorization frameworks with Microsoft Entra ID and other identity providers.
  • Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.
  • Implement fine-grained and parameter-level access control models.
  • Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents.
  • Partner with platform and security teams to ensure secure access governance across distributed systems.
  • Create auditability and traceability mechanisms for authorization decisions.
  • Support adoption of policy-as-code practices and authorization best practices.

требования

  • Cedar policy language — authoring and testing
  • AWS AgentCore Policy LOG_ONLY / ENFORCE modes
  • Python (policy validation tooling)
  • MS Entra claims mapping
  • Parameter-level access control patterns
  • 3+ years security engineering or backend engineering
  • Identity provider integration (Entra, Okta, Cognito)
  • Policy definition in any ABAC or RBAC system
  • Open Policy Agent (OPA) or Cedar hands-on
  • Будет плюсом: LangGraph tool invocation patterns; AWS AgentCore Gateway integration

условия

  • By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results.
  • That’s why we offer a range of benefits that support your well-being and charge your professional growth.
  • We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer.

Компания разработки продуктов с ИИ и цифровых решений.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.