Policy Engineer
First seen by Alion on Oct 30, 2026.
We’re looking for a Policy Engineer to build and maintain the baseline Cedar policy library and policy authoring standards for our client's Enterprise Agent Development Platform.
Responsibilities
Develop and test Cedar authorization policies.
Define access controls for agent-to-agent interactions, capabilities, and tool invocations.
Implement AWS AgentCore policies in LOG_ONLY and ENFORCE modes.
Build Python-based policy validation and testing tools.
Integrate identity claims from Microsoft Entra ID and implement parameter-level access controls.
Requirements
3+ years of security or backend engineering experience.
Knowledge of OAuth 2.0, JWT, OIDC, RBAC, or ABAC.
Experience with policy definition or agent-to-agent (A2A) protocols.
Python proficiency and a strong understanding of authorization boundaries.
Nice to have: Cedar, OPA, AWS AgentCore, LangGraph, or AWS AgentCore Gateway experience.
No prior Cedar experience required — strong authorization fundamentals are what matter most.
Tech stack
- AWS