Security engineer for AI-agent platforms

We are looking for a Security / Policy Engineer to design and implement authorization models for AI agents and cloud-native platforms. The role focuses on AWS AgentCore Policy (Cedar), policy-as-code, OAuth/JWT-based authorization, and zero-trust security architecture. The ideal candidate has hands-on experience with cloud security, identity engineering, ABAC design, and enterprise-grade access control systems.

• Design and implement authorization policies using Cedar and AWS AgentCore Policy.
• Develop and maintain policy-as-code frameworks for cloud-native and AI-agent platforms.
• Build and govern Attribute-Based Access Control (ABAC) models following least-privilege and default-deny principles.
• Integrate authorization systems with OAuth 2.0, JWT, and Microsoft Entra ID.
• Define and maintain principals, resources, actions, and conditional access policies.
• Design token validation, claims mapping, and authorization decision workflows.
• Implement audit logging and traceability for policy evaluation and access decisions.
• Partner with security, architecture, and platform teams to support enterprise security reviews and governance processes.
• Contribute to zero-trust security architecture and authorization strategy across distributed systems.
• Evaluate and adopt emerging AWS authorization technologies, including Cedar and AWS Verified Permissions.

• AWS AgentCore Policy (Cedar)
• Cedar policy language (principals, actions, resources, conditions)
• OAuth 2.0 / JWT / MS Entra integration
• Policy-as-code patterns
• Default-deny authorization models
• Audit logging for policy decisions
• 5+ years cloud security or identity engineering
• Attribute-based access control (ABAC) design
• OAuth 2.0 / JWT token inspection and claims mapping
• Enterprise security review (InfoSec, ARB processes)
• Будет плюсом: AWS Cedar (open source) prior exposure; AWS Verified Permissions or AgentCore Policy early experience; Zero-trust architecture design

• By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results.
• That’s why we offer a range of benefits that support your well-being and charge your professional growth.