Security Engineer (Policy-Based Authorization)

Quick Facts

• Role: Security Engineer (Policy-Based Authorization)

• Focus: Centralized authorization framework for enterprise AI and cloud applications

Description

You will help implement and govern policy-based authorization solutions for enterprise AI and cloud platforms. The work includes developing authorization policies, integrating identity providers, and building secure access control mechanisms using modern policy frameworks.

Responsibilities

• Develop and maintain authorization policies using the Cedar policy language

• Author, test, and validate policy definitions for enterprise applications and AI services

• Implement access control using ABAC and RBAC approaches

• Configure and maintain integrations with identity providers (Microsoft Entra ID, Okta, Amazon Cognito)

• Map identity claims and token attributes to authorization decisions

• Support AWS AgentCore Policy in LOG_ONLY and ENFORCE modes

• Build Python tooling for policy validation, testing, and automation

• Design parameter-level access control patterns for secure tool and service interactions

• Collaborate with security, platform, and engineering teams on authorization requirements and policy controls

• Contribute to audit logging and authorization decision traceability

• Support security reviews and maintain authorization governance standards

Requirements

• 3+ years of experience in security engineering, backend engineering, or a related field

• Hands-on experience integrating enterprise identity providers (Microsoft Entra ID, Okta, Amazon Cognito)

• Experience defining and managing policies within ABAC or RBAC frameworks

• Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies

• Knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures

• Experience working with claims mapping and token-based authorization models

• Understanding of secure authorization design principles and policy lifecycle management

• Experience with Python development for automation, validation, or backend services

• Strong analytical and problem solving skills

• Good written and verbal communication skills

Benefits

• Up to 26 business vacation days per year

• 10 illness/special days off per year (fully paid)

• Health and life insurance (Luxmed)

• MyBenefit platform with Multisport option

• Internal psychological support service

• English language classes from the first working day

• Access to external learning platforms (O’Reilly, LinkedIn Learning, Udemy) and internal training catalog

• Flexible work: office, home, or hybrid

• Tech Skills Mentoring Program

• Opportunities to develop as a public speaker, mentor, or technical interviewer

• Certification reimbursement (AWS, GCP, Microsoft, etc.)