Cedar Policy Engineer: Fine-Grained Access for AI & Cloud

Intellias; Poland; On-site; PLN 180,000 - 260,000; Full time

Job summary

Intellias invites an experienced Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. You will work with Cedar policy language, integrate with Entra/Okta/Cognito, and build Python tooling for policy validation and governance.

The role focuses on policy enforcement, access control models, and secure access governance across distributed systems, partnering with platform and security teams to ensure best practices.

Qualifications

• 3+ years security engineering or backend engineering.
• Identity provider integration with Entra, Okta, Cognito.
• Policy definitions in ABAC or RBAC systems.

Responsibilities

• Design, implement, and maintain Cedar-based authorization policies.
• Develop policy definitions, validation workflows, and enforcement mechanisms.
• Integrate authorization with identity providers and token-based flows.
• Build Python tooling for policy validation and governance.
• Create auditability and traceability for authorization decisions.

Skills

Cedar policy language

Python

ABAC / RBAC concepts

OAuth 2.0 / JWT

Policy as code

Tools

AWS AgentCore Policy

Entra

Okta

Cognito

Job description

Intellias invites an experienced Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. You will work with Cedar policy language, integrate with Entra/Okta/Cognito, and build Python tooling for policy validation and governance.

The role focuses on policy enforcement, access control models, and secure access governance across distributed systems, partnering with platform and security teams to ensure best practices.