{"id":3270380,"url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy","title":"Senior Security Engineer with Cedar Policy","company":{"id":46984,"name":"DataArt","domain":"dataart.com","url":"https://alion.io/company/dataart-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Bulgaria"],"countries":["BG"],"hiring_countries":["BG"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":35000,"max_usd":80000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Bedrock AgentCore","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-26T07:54:40Z","employer_posted_date":null,"last_verified_at":"2026-10-26T07:54:40Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"*This position is fully remote only for employment in Bulgaria. However, people can also work in one of our offices in Sofia or Varna if they prefer to.\n\nAbout DataArt\n\nDataArt is a global software engineering firm and a trusted technology partner for market leaders and visionaries. Our world-class team designs and engineers data-driven, cloud-native solutions to deliver immediate and enduring business value.\n\nWe promote a culture of radical respect, prioritizing your personal well-being as much as your expertise. We stand firmly against prejudice and inequality, valuing each of our employees equally.\n\nWe respect the autonomy of others before all else, offering remote, onsite, and hybrid work options. Our Learning and development centers, R&D labs, and mentorship programs encourage professional growth.\n\nOur long-term approach to collaboration with clients and colleagues alike focuses on building partnerships that extend beyond one-off projects. We provide the ability to switch between projects and technology stacks, creating opportunities for exploration through our learning and networking systems to advance your career.\n\nPosition Overview\n\nThis project focuses on building a centralized authorization layer for enterprise AI services and cloud applications. The platform enables secure, policy based access decisions, integrates with enterprise identity providers, and supports governance, compliance, and audit requirements across distributed environments. You will work closely with security, platform, and architecture teams to establish scalable policy controls, auditability, and zero trust access models.\n\nTechnology stack\n\nAWS AgentCore Policy, Cedar, OAuth 2.0, JWT, OpenID Connect, Microsoft Entra ID, Policy as Code Frameworks, Cloud Security Controls, Audit Logging Systems, Zero Trust Architecture, AWS Verified Permissions\n\nResponsibilities\n\nDesign and implement authorization frameworks using Cedar based policies\n\nDevelop and maintain policy as code solutions for enterprise platforms and AI services\n\nDefine and enforce attribute based access control models across applications and cloud environments\n\nIntegrate authorization services with Microsoft Entra ID, OAuth 2.0, JWT, and OpenID Connect based identity systems\n\nDesign default deny access models and secure authorization patterns\n\nBuild and maintain audit logging mechanisms for authorization decisions and policy evaluations\n\nCollaborate with security architecture and governance teams to support security reviews and compliance requirements\n\nMap identity claims and token attributes to authorization policies and access control models\n\nReview platform designs and recommend improvements for authorization, governance, and security controls\n\nContribute to enterprise security standards, documentation, and best practices\n\nSupport zero trust initiatives and secure access programs across cloud environments\n\nRequirements\n\n5+ years of experience in cloud security engineering, identity engineering, or a related security field\n\nHands on experience designing and implementing attribute based access control solutions\n\nStrong understanding of OAuth 2.0, JWT, OpenID Connect, and identity federation concepts\n\nExperience inspecting authentication tokens and mapping claims to authorization policies\n\nExperience designing, implementing, or governing policy based access control systems\n\nKnowledge of Cedar policy language concepts, including principals, actions, resources, and conditions\n\nExperience working with policy as code methodologies and authorization frameworks\n\nExperience participating in enterprise security reviews, architecture review boards, or information security governance processes\n\nUnderstanding of secure audit logging and authorization decision traceability\n\nStrong written and verbal communication skills\n\nNice To Have\n\nExperience working with AWS Cedar or other Cedar based authorization frameworks\n\nExperience with AWS Verified Permissions or AWS AgentCore Policy services\n\nKnowledge of zero trust architecture principles and implementation patterns\n\nExperience supporting enterprise AI platforms and authorization governance initiatives\n\nExposure to cloud native security services and modern identity architectures\n\nExperience building scalable authorization platforms for distributed systems\n\nWhat We Offer\n\nUnique corporate culture – no micromanagement, friendly atmosphere, freedom, and mutual respect\n\nFlexible schedule – ability to change projects, to work from home, and to try yourself in different roles\n\nProfessional Development Map – a comprehensive map of your professional development within DataArt\n\nWe hire people not for a project, but for the company. If the project (or your work in it) is over, you go to another project or to a paid “Idle”.\n\nSocial benefits – additional health insurance, life insurance, sports card, etc.\n\nOpportunity to work from another DataArt office in a different city or country (temporarily or permanently)\n\nFree English courses\n\nCozy office with a great atmosphere\n\nSnacks, drinks, and fruits are always available\n\nreference number: SEE00040","description_format":"text","description_chars":5101,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance","Hybrid work","Life insurance","Professional development"],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-26T11:16:39Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy","json_url":"https://alion.io/job/dataart-senior-security-engineer-with-cedar-policy.json","meta":{"generated_at":"2026-10-28T14:19:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19495,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46984},"rest":"https://alion.io/mcp/rest/get_company?id=46984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdataart-senior-security-engineer-with-cedar-policy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdataart-senior-security-engineer-with-cedar-policy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdataart-senior-security-engineer-with-cedar-policy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dataart-senior-security-engineer-with-cedar-policy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdataart-senior-security-engineer-with-cedar-policy"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3270380}},{"tool":"search_jobs","arguments":{"company":"dataart.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3270380},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}