Lead Security & Policy Engineer – AI Agent Platform (Remote)

EPAM Systems; Polska; Hybrid; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Hybrid by design

Remote within Poland

60 days abroad annually

Relocation opportunities

Stock Purchase Plan with 15% discount

Health insurance

Multisport

Shopping vouchers

Referral bonuses up to $2,000

English classes

Job summary

EPAM Systems is seeking a Lead Security / Policy Engineer to architect the policy engine and Cedar policy schema for an enterprise AI agent development platform. You will define authorization models, drive InfoSec reviews, and implement policy-as-code patterns to govern agent interactions across a cloud-native ecosystem on AWS AgentCore Runtime.

The role emphasizes identity-aware authorization, RBAC/ABAC, and staged rollout strategies, with hybrid work design and potential international

Qualifications

• 5+ years of cloud security or identity engineering.
• Experience with authorization or policy-as-code for AI agents.
• Expertise in identity-aware authorization (OAuth 2.0, JWT, OIDC).
• RBAC and ABAC design patterns.
• Policy language Cedar or OPA or A2A protocol depth.
• Experience leading enterprise security review processes (InfoSec/ARB).

Responsibilities

• Lead the architecture of the policy engine and Cedar policy schema design.
• Define authorization models for agent-to-agent interactions.
• Drive enterprise InfoSec review processes and ARB alignment.
• Establish default-deny authorization patterns for agent interactions.
• Integrate identity-aware authorization (OAuth 2.0, JWT, OIDC).
• Develop policy-as-code patterns to standardize governance across teams.
• Oversee audit logging of policy decisions and enforcement outcomes.
• Guide staged rollout from monitoring to enforcement.
• Collaborate with engineers on trust boundaries between agents.

Skills

Cloud security

Identity engineering

Authorization

Policy-as-code

RBAC

ABAC

Cedar

OPA

OIDC

InfoSec review

Job description

EPAM Systems is seeking a Lead Security / Policy Engineer to architect the policy engine and Cedar policy schema for an enterprise AI agent development platform. You will define authorization models, drive InfoSec reviews, and implement policy-as-code patterns to govern agent interactions across a cloud-native ecosystem on AWS AgentCore Runtime.

The role emphasizes identity-aware authorization, RBAC/ABAC, and staged rollout strategies, with hybrid work design and potential international