Senior Policy Engineer – Cedar Implementation

About the role

We are seeking a Senior Policy Engineer to join our Enterprise Agent Development Platform team. You will help build a cloud‑native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale while ensuring consistent security, quality, and governance.

Key responsibilities

• Implement a baseline Cedar policy library and authoring standard.
• Author and test Cedar policies for core access‑control scenarios.
• Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments.
• Build Python‑based policy validation tooling to support authoring workflows.
• Map Microsoft Entra claims to policy attributes for identity‑driven decisions.
• Design and implement parameter‑level access‑control patterns.
• Establish policy governance standards for secure, high‑quality agent deployments.

Required profile

• 3+ years of experience in security engineering or backend engineering.
• Expertise in the Cedar policy language, including authoring and testing.
• Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes.
• Proficiency in Python for building validation tools.
• Experience integrating identity providers such as Microsoft Entra, Okta, or Cognito.
• Knowledge of ABAC or RBAC policy definitions.
• Hands‑on background with Open Policy Agent (OPA) or Cedar.
• Understanding of Microsoft Entra claims mapping and parameter‑level access control.
• English proficiency at B2 level or higher.

Required skills

• Cedar policy language
• Python
• AWS AgentCore (LOG_ONLY, ENFORCE)
• Microsoft Entra
• Okta
• Cognito
• ABAC
• RBAC
• Open Policy Agent (OPA)
• LangGraph (nice to have)

What we offer

• Innovative projects with global impact.
• Flexible work environment – vibrant office or remote.
• Opportunity to work abroad up to two months per year.
• Relocation options across 55+ countries.
• Corporate and social events.
• Leadership development, career advising, and well‑being programs.
• Certification support (GCP, Azure, AWS).
• Unlimited access to internal learning resources.
• Free English classes with certified teachers.
• Referral bonuses, medical & family care package, and trust days.
• Psychology session coverage and fitness discounts.