Senior Security Engineer — Cedar Policy & IAM (Remote/Hybrid)

EPAM Systems; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work design

Remote within Poland

Relocation opportunities

English classes

Job summary

EPAM Systems is seeking a Senior Security Software Engineer to implement Cedar policy libraries and policy authoring standards for the Enterprise Agent Development Platform. The role focuses on secure policy governance, access control, and policy tooling to accelerate agent deployment at scale on AWS.

The ideal candidate has 3+ years in security/backend engineering, Cedar policy expertise, and hands-on OPA experience.

Qualifications

• 3+ years of security or backend engineering experience.
• Expertise with Cedar policy language and authoring/testing.
• Hands-on experience with Open Policy Agent (OPA).
• Knowledge of AWS AgentCore Policy modes and MS Entra mapping.

Responsibilities

• Implement Cedar baseline policy library and authoring standards.
• Author and test Cedar policies for agent access control.
• Configure AgentCore Policy LOG_ONLY and ENFORCE modes.
• Build Python tooling to validate policy definitions.
• Map MS Entra claims to platform policy attributes.
• Design parameter-level access control patterns for tooling.
• Establish governance standards for policy authoring.
• Collaborate with platform and security teams to enforce access controls.

Skills

Cedar policy language

Backend security engineering

ABAC/RBAC

Identity provider integration

Python

Policy testing

Tools

OPA

AWS AgentCore

Entra Okta

Cognito

Job description

EPAM Systems is seeking a Senior Security Software Engineer to implement Cedar policy libraries and policy authoring standards for the Enterprise Agent Development Platform. The role focuses on secure policy governance, access control, and policy tooling to accelerate agent deployment at scale on AWS.

The ideal candidate has 3+ years in security/backend engineering, Cedar policy expertise, and hands-on OPA experience.