Security Engineer with Cedar Policy
New
D
DataArtCloud security
Workplace type: remoteFull-TimeMiddle
Salary18000 - 20000 PLN per month net b2b; 14000 - 16500 PLN per month gross permanent
Apply NowOpens the employer's application page
Job Details
- Languages
- En B2
- Experience
- 3+ years of experience in security engineering, backend engineering, or a related field
- Required Skills
- Python
Requirements
- 3+ years of experience in security engineering, backend engineering, or a related field.
- Hands-on experience integrating enterprise identity providers, including Microsoft Entra ID, Okta, or Amazon Cognito.
- Experience defining and managing policies within an ABAC or RBAC authorization framework.
- Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
- Knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
- Experience with claims mapping and token-based authorization models.
- Understanding of secure authorization design principles and policy lifecycle management.
- Experience with Python development for automation, validation, or backend services.
- Experience with LangGraph tool invocation patterns is a nice to have.
- Experience integrating with AWS AgentCore Gateway is a nice to have.
- Knowledge of enterprise AI platform architecture and governance principles is a nice to have.
- Experience implementing policy-as-code methodologies is a nice to have.
Responsibilities
- Develop and maintain authorization policies using the Cedar policy language.
- Author, test, and validate policy definitions for enterprise applications and AI services.
- Implement access-control models using attribute-based and role-based authorization approaches.
- Configure and maintain integrations with identity providers such as Microsoft Entra ID, Okta, and Amazon Cognito.
- Map identity claims and token attributes to authorization decisions and policy rules.
- Support AWS AgentCore Policy implementation in LOG_ONLY and ENFORCE modes.
- Develop Python tooling for policy validation, testing, and automation.
- Design parameter-level access-control patterns for secure tool and service interactions.
- Collaborate with security, platform, and engineering teams to review authorization requirements and implement policy controls.
- Contribute to audit logging, authorization decision traceability, security reviews, and authorization governance.
View Full Description & ApplyYou'll be redirected to the employer's site
