Policy Engineer (Cedar Implementation)

About the Position

We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control. The ideal candidate combines hands-on security engineering experience with strong Python skills and a deep understanding of modern authorization architectures.

Responsibilities

• Design, implement, and maintain authorization policies using Cedar policy language.
• Develop and test policy definitions, validation workflows, and policy enforcement mechanisms.
• Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
• Build Python-based tooling for policy validation, testing, and governance.
• Integrate authorization frameworks with Microsoft Entra ID and other identity providers.
• Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.
• Implement fine-grained and parameter-level access control models.
• Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents.
• Partner with platform and security teams to ensure secure access governance across distributed systems.
• Create auditability and traceability mechanisms for authorization decisions.
• Support adoption of policy-as-code practices and authorization best practices.

Requirements

• Cedar policy language - authoring and testing
• AWS AgentCore Policy LOG_ONLY / ENFORCE modes
• Python (policy validation tooling)
• MS Entra claims mapping
• Parameter-level access control patterns

Experience:

• 3+ years security engineering or backend engineering
• Identity provider integration (Entra, Okta, Cognito)
• Policy definition in any ABAC or RBAC system
• Open Policy Agent (OPA) or Cedar hands-on

Will be a plus:

• LangGraph tool invocation patterns
• AWS AgentCore Gateway integration

We Offer

At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth.

We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law.

We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.

About the Company

Intellias is a global technology company that helps businesses transform through innovative solutions. With a presence in over 180 countries, we provide end-to-end services in software development, data engineering, AI/ML, and more. Our mission is to empower clients with cutting-edge technology and expert knowledge to achieve their strategic goals.