{"id":3453390,"url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy-2","title":"Senior Security Engineer with Cedar Policy","company":{"id":46984,"name":"DataArt","domain":"dataart.com","url":"https://alion.io/company/dataart-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":75,"open_postings":19,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Almaty, Kazakhstan"],"countries":["KZ"],"hiring_countries":["BG","CY","KZ","PL","RO","RS","UA","AM","GE","LV"],"hiring_countries_total":10,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":39000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Bedrock AgentCore","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-08-31T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-09T16:22:17Z","board_verified":false,"closed_at":"2026-11-09T16:22:17Z","days_open":70,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":70},"description":"We are looking for a Senior Security Engineer with strong experience in identity, access management, and policy driven authorization for cloud based platforms. In this role, you will design, implement, and govern authorization frameworks that support secure access to enterprise AI and cloud services. You will work closely with security, platform, and architecture teams to establish scalable policy controls, auditability, and zero trust access models.\nThis project focuses on building a centralized authorization layer for enterprise AI services and cloud applications. The platform enables secure, policy based access decisions, integrates with enterprise identity providers, and supports governance, compliance, and audit requirements across distributed environments.\nDesign and implement authorization frameworks using Cedar based policies\nDevelop and maintain policy as code solutions for enterprise platforms and AI services\nDefine and enforce attribute based access control models across applications and cloud environments\nIntegrate authorization services with Microsoft Entra ID, OAuth 2.0, JWT, and OpenID Connect based identity systems\nDesign default deny access models and secure authorization patterns\nBuild and maintain audit logging mechanisms for authorization decisions and policy evaluations\nCollaborate with security architecture and governance teams to support security reviews and compliance requirements\nMap identity claims and token attributes to authorization policies and access control models\nReview platform designs and recommend improvements for authorization, governance, and security controls\nContribute to enterprise security standards, documentation, and best practices\nSupport zero trust initiatives and secure access programs across cloud environments\n5+ years of experience in cloud security engineering, identity engineering, or a related security field\nHands on experience designing and implementing attribute based access control solutions\nStrong understanding of OAuth 2.0, JWT, OpenID Connect, and identity federation concepts\nExperience inspecting authentication tokens and mapping claims to authorization policies\nExperience designing, implementing, or governing policy based access control systems\nKnowledge of Cedar policy language concepts, including principals, actions, resources, and conditions\nExperience working with policy as code methodologies and authorization frameworks\nExperience participating in enterprise security reviews, architecture review boards, or information security governance processes\nUnderstanding of secure audit logging and authorization decision traceability\nStrong written and verbal communication skills\nExperience working with AWS Cedar or other Cedar based authorization frameworks\nExperience with AWS Verified Permissions or AWS AgentCore Policy services\nKnowledge of zero trust architecture principles and implementation patterns\nExperience supporting enterprise AI platforms and authorization governance initiatives\nExposure to cloud native security services and modern identity architectures\nExperience building scalable authorization platforms for distributed systems","description_format":"text","description_chars":3152,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"},{"name":"Cyprus","iso":"CY","kind":"country"},{"name":"Kazakhstan","iso":"KZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"Serbia","iso":"RS","kind":"country"},{"name":"Ukraine","iso":"UA","kind":"country"},{"name":"Armenia","iso":"AM","kind":"country"},{"name":"Georgia","iso":"GE","kind":"country"},{"name":"Latvia","iso":"LV","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-29T12:30:09Z"},{"event":"close","at":"2026-11-09T16:22:17Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy-2","json_url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy-2.json","meta":{"generated_at":"2026-11-10T01:39:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3817,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46984},"rest":"https://alion.io/mcp/rest/get_company?id=46984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdataart-senior-security-engineer-with-cedar-policy-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdataart-senior-security-engineer-with-cedar-policy-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdataart-senior-security-engineer-with-cedar-policy-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dataart-senior-security-engineer-with-cedar-policy-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdataart-senior-security-engineer-with-cedar-policy-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3453390}},{"tool":"search_jobs","arguments":{"company":"dataart.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3453390},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}