Policy Engineer

Wynagrodzenie
B2B: 350 – 450 EUR / dzień netto

We’re looking for a Policy Engineer to build and maintain the baseline Cedar policy library and policy authoring standards for our client's Enterprise Agent Development Platform.

Responsibilities

• Develop and test Cedar authorization policies.

• Define access controls for agent-to-agent interactions, capabilities, and tool invocations.

• Implement AWS AgentCore policies in LOG_ONLY and ENFORCE modes.

• Build Python-based policy validation and testing tools.

• Integrate identity claims from Microsoft Entra ID and implement parameter-level access controls.

Requirements

• 3+ years of security or backend engineering experience.

• Knowledge of OAuth 2.0, JWT, OIDC, RBAC, or ABAC.

• Experience with policy definition or agent-to-agent (A2A) protocols.

• Python proficiency and a strong understanding of authorization boundaries.

Nice to have: Cedar, OPA, AWS AgentCore, LangGraph, or AWS AgentCore Gateway experience.

No prior Cedar experience required — strong authorization fundamentals are what matter most.