Senior Policy Engineer - Cedar Implementation

🌍 УдалённоSeniorПолная занятостьАутсорс

Зарплата не указана

Есть о чём спросить

Навык востребован (Python). Но вилки нет, про деньги придётся договариваться с нуля.

Нажмите на сигнал, чтобы увидеть, на чём он основан

Чем предстоит заниматься

Implement baseline Cedar policy library and policy authoring standard

Author and test Cedar policies covering core access control scenarios

Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments

Build Python-based policy validation tooling to support authoring workflows

Map MS Entra claims to policy attributes for identity-driven access decisions

Design and implement parameter-level access control patterns

Establish policy governance standards for consistent security and quality across agent deployments

Наши требования

3+ years of experience in security engineering or backend engineering

Expertise in Cedar policy language, including authoring and testing

Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes

Proficiency in Python for policy validation tooling

Experience with identity provider integration such as Entra, Okta, or Cognito

Knowledge of policy definition in ABAC or RBAC systems

Hands-on background in Open Policy Agent (OPA) or Cedar

Understanding of MS Entra claims mapping and parameter-level access control patterns

English proficiency at B2 level or higher

Familiarity with LangGraph tool invocation patterns

Knowledge of AWS AgentCore Gateway integration

Дополнительно

We are looking for a Senior Policy Engineer

To join our Enterprise Agent Development Platform team, a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability, reducing agent development from months to days while enforcing consistent security, quality, and governance standards