Senior Security Engineer with Cedar

Responsibilities

• Implement the baseline Cedar policy library and policy authoring standard for the Enterprise Agent Development Platform.
• Author and test Cedar policies governing agent access control.
• Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes for staged policy rollout.
• Build Python-based tooling to validate policy definitions.
• Map MS Entra claims to platform policy attributes.
• Design parameter-level access control patterns for agent tooling.
• Establish governance standards for policy authoring across engineering teams.
• Collaborate with platform and security teams to enforce consistent access control practices.

Requirements

• 3+ years of experience in security engineering or backend engineering.
• Expertise in Cedar policy language, including authoring and testing.
• Hands-on experience with Open Policy Agent (OPA).
• Knowledge of AWS AgentCore Policy LOG_ONLY and ENFORCE modes.
• Proficiency in Python for policy validation tooling.
• Familiarity with MS Entra claims mapping and parameter-level access control patterns.
• Skills in identity provider integration with Entra, Okta, and Cognito.
• Understanding of policy definition in an ABAC or RBAC system.

Nice to have

• Familiarity with LangGraph tool invocation patterns.
• Knowledge of AWS AgentCore Gateway integration.

We offer

• Hybrid-by-design work mode and the opportunity to work remotely within Poland.
• Opportunity to work abroad for up to 60 days annually.
• Business-driven relocation opportunities.
• Career development programs.
• Thought leadership, mentoring, soft-skills, and well-being programs.
• Certifications: Anthropic, Gemini, GCP, Azure, and AWS.
• English classes.
• Stable pay.
• Participation in the Employee Stock Purchase Plan with a 15% discount.
• Benefits package, including health insurance, multisport, and shopping vouchers.
• Referral bonuses up to $2,000.
• Offices with entertainment and relaxation zones, table tennis, football, free snacks, coffee, and more.
• Corporate, social, and well-being events.
• Benefits listed above are available to employees only.
• Open to working with contractors; B2B cooperation terms are agreed individually.
• Only selected candidates will be contacted.