Senior Policy Engineer - Cedar Implementation

EPAM·Kazakhstan, Uzbekistan, Armenia, Georgia·Удалённо·3д. назад

We are looking for a Senior Policy Engineer to join our Enterprise Agent Development Platform team, a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability, reducing agent development from months to days while enforcing consistent security, quality, and governance standards.

Responsibilities

Implement baseline Cedar policy library and policy authoring standard
Author and test Cedar policies covering core access control scenarios
Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments
Build Python-based policy validation tooling to support authoring workflows
Map MS Entra claims to policy attributes for identity-driven access decisions
Design and implement parameter-level access control patterns
Establish policy governance standards for consistent security and quality across agent deployments

Requirements

3+ years of experience in security engineering or backend engineering
Expertise in Cedar policy language, including authoring and testing
Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes
Proficiency in Python for policy validation tooling
Experience with identity provider integration such as Entra, Okta, or Cognito
Knowledge of policy definition in ABAC or RBAC systems
Hands-on background in Open Policy Agent (OPA) or Cedar
Understanding of MS Entra claims mapping and parameter-level access control patterns
English proficiency at B2 level or higher