Cedar Policy Architect for AI & Cloud Platforms

Intellias; Polska; On-site; PLN 180,000 - 280,000; Full time

Job summary

Intellias is seeking a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. You will work with Cedar policy language, integrate identity providers, and ensure policy enforcement across distributed systems.

You will build Python tooling for policy validation and governance, configure AWS AgentCore in LOG_ONLY and ENFORCE modes, and contribute to ABAC/RBAC patterns, OAuth 2.0/JWT flows, and secure access governance

Qualifications

• 3+ years security engineering or backend engineering
• Experience with identity providers (Entra, Okta, Cognito)
• Policy definition in ABAC or RBAC systems

Responsibilities

• Design, implement, and maintain authorization policies using Cedar policy language.
• Develop and test policy definitions, validation workflows, and policy enforcement mechanisms.
• Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
• Build Python-based tooling for policy validation, testing, and governance.
• Integrate authorization frameworks with Microsoft Entra ID and other identity providers.
• Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.
• Implement fine-grained and parameter-level access control models.
• Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents.
• Partner with platform and security teams to ensure secure access governance across distributed systems.
• Create auditability and traceability mechanisms for authorization decisions.
• Support adoption of policy-as-code practices and authorization best practices.

Skills

Cedar policy language

Python

ABAC/RBAC concepts

Identity provider integration

OAuth 2.0 / JWT

Tools

AWS

Entra / Microsoft Entra ID

Okta

Cognito

Job description

Intellias is seeking a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. You will work with Cedar policy language, integrate identity providers, and ensure policy enforcement across distributed systems.

You will build Python tooling for policy validation and governance, configure AWS AgentCore in LOG_ONLY and ENFORCE modes, and contribute to ABAC/RBAC patterns, OAuth 2.0/JWT flows, and secure access governance