Policy Engineer (Cedar Implementation)

We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control.

• Design, implement, and maintain authorization policies using Cedar policy language
• Develop and test policy definitions, validation workflows, and policy enforcement mechanisms
• Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes
• Build Python-based tooling for policy validation, testing, and governance
• Integrate authorization frameworks with Microsoft Entra ID and other identity providers
• Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT
• Implement fine-grained and parameter-level access control models
• Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents
• Partner with platform and security teams to ensure secure access governance across distributed systems
• Create auditability and traceability mechanisms for authorization decisions
• Support adoption of policy-as-code practices and authorization best practices

• Cedar policy language — authoring and testing
• AWS AgentCore Policy LOG_ONLY / ENFORCE modes
• Python (policy validation tooling)
• MS Entra claims mapping
• Parameter-level access control patterns
• 3+ years security engineering or backend engineering
• Identity provider integration (Entra, Okta, Cognito)
• Policy definition in any ABAC or RBAC system
• Open Policy Agent (OPA) or Cedar hands-on

• LangGraph tool invocation patterns
• AWS AgentCore Gateway integration

• range of benefits that support your well-being and charge your professional growth

Resumo organizado por IA a partir do anúncio original. Confirma os detalhes no site da empresa.