Senior Policy Engineer - Cedar Implementation

About the role

We are seeking a Senior Policy Engineer to join our Enterprise Agent Development Platform team. The role focuses on building a robust, cloud‑native policy framework that enables secure, scalable AI agent deployments across the organization.

Key responsibilities

• Implement a baseline Cedar policy library and establish a policy authoring standard.
• Author and test Cedar policies for core access‑control scenarios.
• Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments.
• Develop Python‑based validation tooling to streamline policy authoring workflows.
• Map Microsoft Entra claims to policy attributes for identity‑driven decisions.
• Design and implement parameter‑level access‑control patterns.
• Establish governance standards to ensure consistent security and quality across agent deployments.

Required profile

• 3+ years of experience in security engineering or backend engineering.
• Strong expertise in the Cedar policy language, including authoring and testing.
• Proficiency in Python for building validation tools.
• Experience integrating identity providers such as Microsoft Entra, Okta, or Cognito.
• Solid understanding of ABAC/RBAC models and Open Policy Agent (OPA) concepts.
• English proficiency at B2 level or higher.

Required skills

• Cedar policy language
• Python
• AWS AgentCore Policy (LOG_ONLY & ENFORCE modes)
• Microsoft Entra claims mapping
• Okta or Cognito integration
• ABAC and RBAC policy design
• Open Policy Agent (OPA)

What we offer

• Fully remote work from anywhere in Armenia.
• Access to EPAM’s internal learning platform and certification programs (GCP, Azure, AWS).
• Leadership development, career advising, and well‑being programs.
• Employee Stock Purchase Plan and referral bonuses.
• Comprehensive medical and family care package.
• Four trust days per year for personal needs.